PT-2019-15146
CVE-2019-17421
·
Publicado
2019-11-21
·
Atualizado
2021-04-29
Descrição por
CVSS 3.1
7.8
AltaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine OpManager version 12.4.072
Zoho ManageEngine Firewall Analyzer version 12.4.072
Description
The issue arises from incorrect file permissions on the packaged Nipper executable file, allowing local users to elevate privileges to root by overwriting this file with a malicious payload.
Recommendations
For Zoho ManageEngine OpManager version 12.4.072, update the file permissions of the Nipper executable to prevent local users from overwriting it.
For Zoho ManageEngine Firewall Analyzer version 12.4.072, update the file permissions of the Nipper executable to prevent local users from overwriting it.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾