CVE-2021-44650

Опубликовано: 12 янв. 2022

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.

Ссылки

https://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4419
Vendor Advisory
https://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4419
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:*:*:*:*:*:*:*:*

Версия до 4.4 (исключая)

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:-:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4400:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4401:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4402:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4403:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4406:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4407:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4408:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4410:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4411:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4412:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4413:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4414:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4415:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4416:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4417:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.4:build4418:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04615

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-r94f-5mf3-7vp2

github

около 4 лет назад