Lucene search
HistoryNov 03, 2023 - 7:15 a.m.
CVE-2023-41344
ncsist
manageengine mobile device manager
path traversal
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
45.3%
NCSIST ManageEngine Mobile Device Manager(MDM) APP’s special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files.
Affected configurations
Node
ncsistmobile_device_managerMatch1.4
Related
cvelist
cvelist
CVE-2023-41344 NCSIST ManageEngine MDM - Path Traversal
2023-11-03 06:03:33
cve
cve
CVE-2023-41344
2023-11-03 07:15:14
prion
prion
Path traversal
2023-11-03 07:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
45.3%
Related for NVD:CVE-2023-41344