ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
References
Link | Resource |
---|---|
https://manageengine.com | Vendor Advisory |
https://www.manageengine.com/itom/advisory/cve-2022-35404.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Information
Published : 2022-07-18 06:15
Updated : 2022-07-29 14:57
NVD link : CVE-2022-35404
Mitre link : CVE-2022-35404
JSON object : View
CWE
CWE-400
Uncontrolled Resource Consumption
Products Affected
zohocorp
- manageengine_netflow_analyzer
- manageengine_opmanager
- manageengine_network_configuration_manager
- manageengine_firewall_analyzer