Vulners
Lucene search
Zoho ManageEngine ADManager Plus 6.6 Privilege Escalation
🗓️ 16 Apr 2019 00:00:00Reported by Digital InterruptionType 
packetstorm🔗 packetstormsecurity.com👁 80 Views
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | Zoho ManageEngine ADManager Plus 6.6 (Build < 6659) - Privilege Escalation Vulnerability | 16 Apr 201900:00 | – | zdt |
 | CVE-2018-19374 | 30 Apr 201917:30 | – | cve |
 | CVE-2018-19374 | 30 Apr 201917:30 | – | cvelist |
 | Zoho ManageEngine ADManager Plus 6.6 (Build < 6659) - Privilege Escalation | 16 Apr 201900:00 | – | exploitdb |
 | EUVD-2018-11067 | 7 Oct 202500:30 | – | euvd |
 | Zoho ManageEngine ADManager Plus 6.6 (Build 6659) - Privilege Escalation | 16 Apr 201900:00 | – | exploitpack |
 | CVE-2018-19374 | 30 Apr 201918:29 | – | nvd |
 | Directory traversal | 30 Apr 201918:29 | – | prion |
`# Exploit Title: Zoho ManageEngine ADManager Plus 6.6 (Build < 6659) Privilege Escalation
# Date: 15th April 2019
# Exploit Author: Digital Interruption
# Vendor Homepage: https://www.manageengine.co.uk/
# Version: 6.6 (Build 6658)
# Tested on: Windows Server 2012 R2
# CVE : CVE-2018-19374
Due to weak permissions setup on the bin, lib and tools directories within the ManageEngine installation directory, it is possible for any authenticated user to modify several core files.
To escalate privileges to that of LOCAL SYSTEM, drop a payload onto the system and then add a line to bin\ChangeJRE.bat to execute it every time the system is rebooted.
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Apr 2019 00:00Current
0.6Low risk
Vulners AI Score0.6
EPSS0.00103