PT-2019-8648 · Manageengine · Manageengine Servicedesk Plus

Filipe Reis + 1 · Publicado 2019-03-25 · Atualizado 2019-04-02 · CVE-2017-9362

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus versions prior to 9312

Description The issue concerns an XML injection at the add Configuration items CMDB API.

Recommendations For versions prior to 9312, update to version 9312 or later to resolve the issue.

Exploit

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2017-9362

Produtos afetados

Manageengine Servicedesk Plus

Referências · 3

• 🔥 https://labs.integrity.pt/advisories/cve-2017-9362 · Exploit
• https://osv.dev/vulnerability/CVE-2017-9362 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9362 · Nota de Segurança