Lucene search

PRIOn knowledge basePRION:CVE-2023-29084

HistoryApr 13, 2023 - 7:15 p.m.

Command injection

2023-04-1319:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:P/I:P/A:P

0.387 Low

EPSS

Percentile

97.1%

JSON

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings.

CPENameOperatorVersion
manageengine_admanager_pluseq7.1 7100
manageengine_admanager_pluseq7.1 7101
manageengine_admanager_pluslt7.1
manageengine_admanager_pluseq7.1 7102
manageengine_admanager_pluseq7.1 7110
manageengine_admanager_pluseq7.1 7111
manageengine_admanager_pluseq7.1 7112
manageengine_admanager_pluseq7.1 7113
manageengine_admanager_pluseq7.1 7114
manageengine_admanager_pluseq7.1 7115

Name	Operator	Version
manageengine_admanager_plus	eq	7.1 7100
manageengine_admanager_plus	eq	7.1 7101
manageengine_admanager_plus	lt	7.1
manageengine_admanager_plus	eq	7.1 7102
manageengine_admanager_plus	eq	7.1 7110
manageengine_admanager_plus	eq	7.1 7111
manageengine_admanager_plus	eq	7.1 7112
manageengine_admanager_plus	eq	7.1 7113
manageengine_admanager_plus	eq	7.1 7114
manageengine_admanager_plus	eq	7.1 7115

Rows per page:

1-10 of 331

References

packetstormsecurity.com/files/172755/ManageEngine-ADManager-Plus-Command-Injection.html

manageengine.com

www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-29084.html

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:P/I:P/A:P

0.387 Low

EPSS

Percentile

97.1%

JSON

Related for PRION:CVE-2023-29084