Zoho ManageEngine Desktop Central File Upload Vulnerability

Description

References

• packetstormsecurity.com/files/156730/ManageEngine-Desktop-Central-Java-Deserialization.html · Exploit
• cwe.mitre.org/data/definitions/502.html · Third Party Advisory
• srcincite.io/advisories/src-2020-0011 · Exploit
• srcincite.io/pocs/src-2020-0011.py.txt · Exploit
• manageengine.com/products/desktop-central/remote-code-execution-vulnerability.html · Vendor Advisory
• zdnet.com/article/zoho-zero-day-published-on-twitter · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2020-10189

Autres vulnérabilités de manageengine desktop central

• CVE-2023-4769ÉLEVÉE 8.8A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This…
• CVE-2023-4768MOYENNE 6.1A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remo…
• CVE-2023-4767MOYENNE 6.1A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remo…
• CVE-2022-48362ÉLEVÉE 8.8Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadSer…
• CVE-2022-23779MOYENNE 5.3Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by…