CVE-2024-27311

Опубликовано: 17 июл. 2024

Источник: nvd

CVSS3: 5.5

CVSS3: 8.8

EPSS Низкий

Описание

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

Ссылки

https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2024-27311.html
Vendor Advisory
https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2024-27311.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zohocorp:manageengine_ddi_central:*:*:*:*:*:*:*:*

Версия до 4002 (исключая)

EPSS

Процентиль: 61%

0.00406

Низкий

5.5 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-3832-gg43-7qm4

CVSS3: 5.5

github

больше 1 года назад

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

EPSS

Процентиль: 61%

0.00406

Низкий

5.5 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-434