PT-2021-22835 · Zoho · Zoho Manageengine Log360

CVE-2021-40177

·

Published

2021-08-29

·

Updated

2021-09-01

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5225
Description The issue allows remote code execution via BCP file overwrite.
Recommendations For versions prior to Build 5225, update to Build 5225 or later to resolve the issue.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2021-40177

Affected Products

Zoho Manageengine Log360