CVE-2021-28382

概要

参考情報

• raxis.com/blog/cve-2021-28382 · Exploit
• manageengine.com/key-manager/release-notes.html · Vendor Advisory

manageengine key manager plus のその他の脆弱性

• CVE-2022-47966緊急 9.8悪用確認済み（CISA KEV）Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache San…
• CVE-2022-24447中 6.5An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the leve…
• CVE-2022-24446中 4.3An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user info…
• CVE-2019-12133高 7.8Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine di…