PT-2019-7896
CVE-2017-11561
·
تاريخ النشر
2019-05-23
·
تاريخ التحديث
2019-05-24
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ZOHO ManageEngine OpManager version 12.2
Description
An issue was discovered that allows an authenticated user to upload any file in the "Group Chat" or "Alarm" section, which can be abused by a malicious user to upload a web shell.
Recommendations
For ZOHO ManageEngine OpManager version 12.2, consider restricting file upload capabilities in the "Group Chat" and "Alarm" sections to prevent potential abuse until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾