CVE-2022-48362

概要

参考情報

• srcincite.io/blog/2022/01/20/zohowned-a-critical-authentication-bypass-on-zoho-manageengine-desktop-central.html · Exploit
• manageengine.com/products/desktop-central/cve-2022-48362.html

manageengine desktop central のその他の脆弱性

• CVE-2023-4769高 8.8A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This…
• CVE-2023-4768中 6.1A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remo…
• CVE-2023-4767中 6.1A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remo…
• CVE-2022-23779中 5.3Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by…
• CVE-2022-23863中 6.5Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password.