critical9.1
CVE-2023-47211
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258.
Impact
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Firewall Analyzer | before 12.7 Version 12.7 |
| Zohocorp | Manageengine Netflow Analyzer | before 12.7 Version 12.7 |
| Zohocorp | Manageengine Network Configuration Manager | before 12.7 Version 12.7 |
| Zohocorp | Manageengine Opmanager | before 12.7 Version 12.7 |
| Zohocorp | Manageengine Opmanager Msp | before 12.7 Version 12.7 |
| Zohocorp | Manageengine Opmanager Plus | before 12.7 Version 12.7 |
| Zohocorp | Manageengine Oputils | before 12.7 Version 12.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851
- https://www.manageengine.com/itom/advisory/cve-2023-47211.html
- https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851
- https://www.manageengine.com/itom/advisory/cve-2023-47211.html
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1851