Lucene search

[email protected]CVE-2022-35404

HistoryJul 18, 2022 - 1:15 p.m.

CVE-2022-35404

2022-07-1813:15:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2022-35404

manageengine

password manager pro

opmanager

unauthorized

file creation

directory creation

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

8 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

73.0%

JSON

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.

CPENameOperatorVersion
zohocorp:manageengine_opmanagerzohocorp manageengine opmanagerlt12.5
zohocorp:manageengine_network_configuration_managerzohocorp manageengine network configuration managereq12.5
zohocorp:manageengine_netflow_analyzerzohocorp manageengine netflow analyzereq12.5
zohocorp:manageengine_firewall_analyzerzohocorp manageengine firewall analyzerlt12.5

CPE	Name	Operator	Version
zohocorp:manageengine_opmanager	zohocorp manageengine opmanager	lt	12.5
zohocorp:manageengine_network_configuration_manager	zohocorp manageengine network configuration manager	eq	12.5
zohocorp:manageengine_netflow_analyzer	zohocorp manageengine netflow analyzer	eq	12.5
zohocorp:manageengine_firewall_analyzer	zohocorp manageengine firewall analyzer	lt	12.5

References

manageengine.com

www.manageengine.com/itom/advisory/cve-2022-35404.html

Social References

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

8 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

73.0%

JSON

Related for CVE-2022-35404

prion1 cvelist1