PT-2020-16897
CVE-2020-27995
·
تاريخ النشر
2020-10-29
·
تاريخ التحديث
2020-11-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine Applications Manager version 14 before 14560
Description
The issue allows an attacker to execute commands on the server. This is achieved via the
template resid parameter in the "MyPage.do" endpoint.Recommendations
For Zoho ManageEngine Applications Manager version 14 before 14560, update to version 14560 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾