Path traversal

2022-07-0200:15:00

PRIOn knowledge base

www.prio-n.com

0.014 Low

EPSS

Percentile

86.7%

JSON

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml).

CPENameOperatorVersion
manageengine_servicedesk_plus_mspeq10.6 10600
manageengine_servicedesk_plus_mspeq10.6 10601
manageengine_servicedesk_plus_mspeq10.6 10602
manageengine_servicedesk_plus_mspeq10.6 10603
manageengine_servicedesk_plus_mspeq10.6
manageengine_servicedesk_plus_msplt10.6

Name	Operator	Version
manageengine_servicedesk_plus_msp	eq	10.6 10600
manageengine_servicedesk_plus_msp	eq	10.6 10601
manageengine_servicedesk_plus_msp	eq	10.6 10602
manageengine_servicedesk_plus_msp	eq	10.6 10603
manageengine_servicedesk_plus_msp	eq	10.6
manageengine_servicedesk_plus_msp	lt	10.6

References

www.manageengine.com/products/service-desk-msp/CVE-2022-32551.html

0.014 Low

EPSS

Percentile

86.7%

JSON

Related for PRION:CVE-2022-32551