Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

概要

参考情報

• packetstormsecurity.com/files/165400/ManageEngine-ServiceDesk-Plus-Remote-Code-Execution.html · Exploit
• pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerability-in-servicedesk-plus-versions-11138-and-above · Patch
• pitstop.manageengine.com/portal/en/community/topic/security-advisory-for-cve-2021-44077-unauthenticated-rce-vulnerability-in-servicedesk-plus-msp-versions-10527-till-10529 · Vendor Advisory
• pitstop.manageengine.com/portal/en/community/topic/security-advisory-for-cve-2021-44077-unauthenticated-rce-vulnerability-in-servicedesk-plus-versions-up-to-11305-22-11-2021 · Vendor Advisory
• pitstop.manageengine.com/portal/en/community/topic/security-advisory-for-cve-2021-44077-unauthenticated-rce-vulnerability-in-supportcenter-plus-versions-11012-and-11013 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog

manageengine servicedesk plus のその他の脆弱性

• CVE-2024-50053中 5.4Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerabl…
• CVE-2024-41150中 6.1An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and Supp…
• CVE-2024-38869中 5.4Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue a…
• CVE-2024-27314低 2.4Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable …
• CVE-2023-6105中 5.5An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-pri…