PT-2022-12192
CVE-2021-44650
·
تاريخ النشر
2022-01-12
·
تاريخ التحديث
2022-01-24
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine M365 Manager Plus versions prior to Build 4419
Description
The issue allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.
Recommendations
For versions prior to Build 4419, update to Build 4419 or later to resolve the issue. As a temporary workaround, consider restricting access to the Admin ProxySettings and Tenant ProxySettings components until a patch is applied. Avoid using these components for updating proxy settings until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾