CVE-2021-28382

Description

References

• raxis.com/blog/cve-2021-28382 · Exploit
• manageengine.com/key-manager/release-notes.html · Vendor Advisory

manageengine key manager plus의 다른 취약점

• CVE-2022-47966심각 9.8EXPLOITED (CISA KEV)Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache San…
• CVE-2022-24447보통 6.5An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the leve…
• CVE-2022-24446보통 4.3An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user info…
• CVE-2019-12133높음 7.8Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine di…