CVE-2021-44652

Опубликовано: 12 янв. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component.

Ссылки

https://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4416
Vendor Advisory
https://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4416
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:*:*:*:*:*:*:*:*

Версия до 4.4 (исключая)

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:-:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4400:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4401:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4402:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4403:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4406:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4407:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4408:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4410:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4411:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4412:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4413:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4414:*:*:*:*:*:*

cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.4:build4415:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01114

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-5cvg-26v3-2vvc

github

около 4 лет назад