CVE-2022-24446

概要

参考情報

• cds.thalesgroup.com/en/tcs-cert/CVE-2022-24446
• excellium-services.com/cert-xlm-advisory/cve-2022-24446 · Third Party Advisory
• manageengine.com/key-manager/release-notes.html · Release Notes

manageengine key manager plus のその他の脆弱性

• CVE-2022-47966緊急 9.8悪用確認済み（CISA KEV）Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache San…
• CVE-2022-24447中 6.5An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the leve…
• CVE-2021-28382中 5.4Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.
• CVE-2019-12133高 7.8Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine di…