CVE-2021-44525

Опубликовано: 20 дек. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zohocorp:manageengine_pam360:4.0:*:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:4.0:build4001:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:4.0:build4002:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:4.1:*:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:4.1:build4100:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:4.1:build4101:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:4.5:*:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:4.5:build4500:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:4.5:build4501:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.0:*:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5000:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5001:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5002:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5003:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.0:build5004:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.1:*:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.1:build5100:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.2:*:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.2:build5200:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.3:*:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.3:build5300:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.3:build5301:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_pam360:5.3:build5302:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00777

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-v79c-w8qr-chq9