PT-2019-15146 · Zoho+1 · Zoho Manageengine Opmanager+2

Guy Levin + 1 · Published 2019-11-21 · Updated 2021-04-29 · CVE-2019-17421

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.4.072 Zoho ManageEngine Firewall Analyzer version 12.4.072

Description The issue arises from incorrect file permissions on the packaged Nipper executable file, allowing local users to elevate privileges to root by overwriting this file with a malicious payload.

Recommendations For Zoho ManageEngine OpManager version 12.4.072, update the file permissions of the Nipper executable to prevent local users from overwriting it. For Zoho ManageEngine Firewall Analyzer version 12.4.072, update the file permissions of the Nipper executable to prevent local users from overwriting it.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2019-17421

Affected Products

Nipper

Zoho Manageengine Firewall Analyzer

Zoho Manageengine Opmanager

References · 5

• 🔥 https://twitter.com/va_start · Exploit
• https://manageengine.com/products/firewall/security-updates/cve-2019-17421.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17421 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17421 · Vendor Advisory
• https://blog.vastart.dev/2019/11/cve-2019-17421-privilege-escalation.html · Note