Lucene search
0fc0942c-577d-436f-ae8e-945763c79b02NVD:CVE-2024-0252HistoryJan 11, 2024 - 8:15 a.m.
CVE-2024-0252
2024-01-1108:15:35
CWE-94
0fc0942c-577d-436f-ae8e-945763c79b02
web.nvd.nist.gov
3
cve-2024-0252
manageengine adselfservice plus
remote code execution
improper handling
load balancer component vulnerability
authentication required
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
47.0%
ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability.
Affected configurations
Node
zohocorpmanageengine_adselfservice_plusRange<6.4
ORzohocorpmanageengine_adselfservice_plusMatch6.46400
ORzohocorpmanageengine_adselfservice_plusMatch6.46401
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zohocorp | manageengine_adselfservice_plus | * | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 6.4 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.4:6400:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 6.4 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.4:6401:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-0252 Remote code execution
2024-01-11 07:57:12
prion
prion
Remote code execution
2024-01-11 08:15:00
cve
cve
CVE-2024-0252
2024-01-11 08:15:35
nessus
nessus
ManageEngine ADSelfService Plus < build 6402 Authenticated RCE
2024-01-18 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
47.0%
Related for NVD:CVE-2024-0252