Lucene search

0fc0942c-577d-436f-ae8e-945763c79b02CVE-2024-0252

HistoryJan 11, 2024 - 8:15 a.m.

CVE-2024-0252

2024-01-1108:15:35

CWE-94

0fc0942c-577d-436f-ae8e-945763c79b02

web.nvd.nist.gov

manageengine

adselfservice plus

cve-2024-0252

remote code execution

vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.0%

JSON

ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability.

Affected configurations

NVD

Node

zohocorpmanageengine_adselfservice_plusRange<6.4

zohocorpmanageengine_adselfservice_plusMatch6.46400

zohocorpmanageengine_adselfservice_plusMatch6.46401

CPENameOperatorVersion
zohocorp:manageengine_adselfservice_pluszohocorp manageengine adselfservice pluslt6.4

CPE	Name	Operator	Version
zohocorp:manageengine_adselfservice_plus	zohocorp manageengine adselfservice plus	lt	6.4

CNA Affected

[
  {
    "collectionURL": "https://www.manageengine.com/products/download.html",
    "defaultStatus": "affected",
    "platforms": [
      "Windows"
    ],
    "product": "ADSelfService Plus",
    "vendor": "ManageEngine",
    "versions": [
      {
        "lessThan": "6402",
        "status": "affected",
        "version": "0",
        "versionType": "6401"
      }
    ]
  }
]

References

www.manageengine.com/products/self-service-password/advisory/CVE-2024-0252.html

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.0%

JSON

Related for CVE-2024-0252