CVE-2019-12876

Опубликовано: 17 июл. 2019

Источник: nvd

CVSS3: 7.3

CVSS2: 8.5

EPSS Низкий

Описание

Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System.

Ссылки

http://www.securityfocus.com/bid/109298
Third Party Advisory
VDB Entry
https://www.criticalstart.com/2019/07/manageengine-privilege-escalation/
Exploit
Third Party Advisory
http://www.securityfocus.com/bid/109298
Third Party Advisory
VDB Entry
https://www.criticalstart.com/2019/07/manageengine-privilege-escalation/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6.5:*:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:*:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_desktop_central:10.0.380:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.001

Низкий

7.3 High

CVSS3

8.5 High

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-38rv-3hxq-v5g9

github

больше 3 лет назад