CVE-2022-24447

概要

参考情報

• cds.thalesgroup.com/en/tcs-cert/CVE-2022-24447
• excellium-services.com/cert-xlm-advisory/cve-2022-24447 · Third Party Advisory
• manageengine.com/key-manager/release-notes.html · Release Notes

manageengine key manager plus のその他の脆弱性

• CVE-2022-47966緊急 9.8悪用確認済み（CISA KEV）Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache San…
• CVE-2022-24446中 4.3An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user info…
• CVE-2021-28382中 5.4Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.
• CVE-2019-12133高 7.8Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine di…