CVE-2024-27311

Arbitrary file writing

CVSS 5.5 MEDIUMEPSS 1.5%CWE-434

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Produtos afetados

ManageEngine · DDI Central

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2024-27311.html