PT-2019-15146 · Zoho+1 · Zoho Manageengine Opmanager+2

Guy Levin + 1 · Publicado 2019-11-21 · Atualizado 2021-04-29 · CVE-2019-17421

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.4.072 Zoho ManageEngine Firewall Analyzer version 12.4.072

Description The issue arises from incorrect file permissions on the packaged Nipper executable file, allowing local users to elevate privileges to root by overwriting this file with a malicious payload.

Recommendations For Zoho ManageEngine OpManager version 12.4.072, update the file permissions of the Nipper executable to prevent local users from overwriting it. For Zoho ManageEngine Firewall Analyzer version 12.4.072, update the file permissions of the Nipper executable to prevent local users from overwriting it.

Exploit

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2019-17421

Produtos afetados

Nipper

Zoho Manageengine Firewall Analyzer

Zoho Manageengine Opmanager

Referências · 5

• 🔥 https://twitter.com/va_start · Exploit
• https://manageengine.com/products/firewall/security-updates/cve-2019-17421.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-17421 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-17421 · Aviso do Fabricante
• https://blog.vastart.dev/2019/11/cve-2019-17421-privilege-escalation.html · Nota