Zoho ManageEngine M365 Manager Plus まで4418 Proxy Settings Privilege Escalation

フィールド2022年01月12日 19:352022年01月15日 10:06
vendorZoho ManageEngineZoho ManageEngine
nameM365 Manager PlusM365 Manager Plus
version<=4418<=4418
componentProxy Settings HandlerProxy Settings Handler
cvss3_vuldb_avNN
cvss3_vuldb_acLL
cvss3_vuldb_sUU
cvss3_vuldb_cLL
cvss3_vuldb_iLL
cvss3_vuldb_aLL
cvss3_vuldb_rlOO
cvss3_vuldb_rcCC
urlhttps://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4419https://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4419
nameUpgradeUpgrade
upgrade_version44194419
upgrade_urlhttps://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4419https://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4419
cveCVE-2021-44650CVE-2021-44650
cve_assigned16387452001638745200
date1641942000 (2022年01月12日)1641942000 (2022年01月12日)
cvss2_vuldb_avNN
cvss2_vuldb_acLL
cvss2_vuldb_ciPP
cvss2_vuldb_iiPP
cvss2_vuldb_aiPP
cvss2_vuldb_rcCC
cvss2_vuldb_rlOFOF
cvss2_vuldb_auSS
cvss2_vuldb_eNDND
cvss3_vuldb_prLL
cvss3_vuldb_uiNN
cvss3_vuldb_eXX
cvss2_vuldb_basescore6.56.5
cvss2_vuldb_tempscore5.75.7
cvss3_vuldb_basescore6.36.3
cvss3_vuldb_tempscore6.06.0
cvss3_meta_basescore6.36.3
cvss3_meta_tempscore6.06.0
price_0day$0-$5k$0-$5k
cve_nvd_summaryZoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.

◂ 前概要次 ▸

Do you know our Splunk app?

Download it now for free!