Lucene search
MitreCVELIST:CVE-2018-17283HistorySep 21, 2018 - 3:00 a.m.
CVE-2018-17283
2018-09-2103:00:00
mitre
www.cve.org
3
EPSS
0.401
Percentile
97.3%
Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL Injection attack via the /api/json/device/setManaged name parameter.
Related
prion
prion
Sql injection
2018-09-21 03:29:00
cve
cve
CVE-2018-17283
2018-09-21 03:29:00
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2018-17283
2018-09-21 03:29:00