PT-2018-14478 · Zoho · Zoho Manageengine Opmanager

Hakan Bayir + 1 · Publicado 2018-10-23 · Atualizado 2021-05-04 · CVE-2018-18475

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.3 build 123214

Description The issue allows for Unrestricted Arbitrary File Upload.

Recommendations For versions prior to 12.3 build 123214, update to version 12.3 build 123214 or later to resolve the issue.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-18475

Produtos afetados

Zoho Manageengine Opmanager

Referências · 4

• http://seclists.org/fulldisclosure/2018/Oct/42 · Nota
• http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html · Nota
• https://osv.dev/vulnerability/CVE-2018-18475 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-18475 · Nota de Segurança