Zoho ManageEngine CloudSecurityPlus up to 4116 updatePersonalizeSettings Privilege Escalation

EntryeditHistoryDiffjsonxmlCTI

A vulnerability was found in Zoho ManageEngine CloudSecurityPlus up to 4116 (Cloud Software). It has been rated as critical. Affected by this issue is some unknown processing of the component updatePersonalizeSettings. Upgrading to version 4117 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

0	21
1	18

Field

source_cve_nvd_summary	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1
vulnerability_cvss3_vuldb_tempscore	1

Commit Conf

90%	26
50%	12
70%	1

Approve Conf

90%	26
80%	12
70%	1

ID	Commited	User	Field	Change	Remarks	Accepted	Reason	C
12050151	01/15/2022	VulD...	cve_nvd_summary	Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.	cve.mitre.org	01/15/2022	accepted	70
12037109	01/12/2022	VulD...	price_0day	$0-$5k	see exploit price documentation	01/12/2022	accepted	90
12037108	01/12/2022	VulD...	cvss3_meta_tempscore	6.0	see CVSS documentation	01/12/2022	accepted	90
12037107	01/12/2022	VulD...	cvss3_meta_basescore	6.3	see CVSS documentation	01/12/2022	accepted	90
12037106	01/12/2022	VulD...	cvss3_vuldb_tempscore	6.0	see CVSS documentation	01/12/2022	accepted	90
12037105	01/12/2022	VulD...	cvss3_vuldb_basescore	6.3	see CVSS documentation	01/12/2022	accepted	90
12037104	01/12/2022	VulD...	cvss2_vuldb_tempscore	5.7	see CVSS documentation	01/12/2022	accepted	90
12037103	01/12/2022	VulD...	cvss2_vuldb_basescore	6.5	see CVSS documentation	01/12/2022	accepted	90
12037102	01/12/2022	VulD...	cvss3_vuldb_e	X	derived from historical data	01/12/2022	accepted	80
12037101	01/12/2022	VulD...	cvss3_vuldb_ui	N	derived from historical data	01/12/2022	accepted	80
12037100	01/12/2022	VulD...	cvss3_vuldb_pr	L	derived from historical data	01/12/2022	accepted	80
12037099	01/12/2022	VulD...	cvss2_vuldb_e	ND	derived from historical data	01/12/2022	accepted	80
12037098	01/12/2022	VulD...	cvss2_vuldb_au	S	derived from historical data	01/12/2022	accepted	80
12037097	01/12/2022	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	01/12/2022	accepted	80
12037096	01/12/2022	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	01/12/2022	accepted	80
12037095	01/12/2022	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12037094	01/12/2022	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12037093	01/12/2022	VulD...	cvss2_vuldb_ci	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12037092	01/12/2022	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	01/12/2022	accepted	80
12037091	01/12/2022	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	01/12/2022	accepted	80