CVE-2024-48878

Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report.

CVSS v3 8.3 HIGH

8.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2024-48878.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zohocorp:manageengine_admanager_plus::::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7203::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7210::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7211::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7212::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7220::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7221::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7222::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7223::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7224::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7230::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7231::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7232::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7240::::::
	cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7241::::::

History

No history.

Information

Published : 2024-11-04 11:15

Updated : 2024-11-05 19:44

NVD link : CVE-2024-48878

Mitre link : CVE-2024-48878

CVE.ORG link : CVE-2024-48878

JSON object : View

Products Affected

zohocorp

manageengine_admanager_plus

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2024-48878", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "0fc0942c-577d-436f-ae8e-945763c79b02", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.5, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-11-04T11:15:06.417", "references": [{"url": "https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2024-48878.html", "tags": ["Vendor Advisory"], "source": "0fc0942c-577d-436f-ae8e-945763c79b02"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "0fc0942c-577d-436f-ae8e-945763c79b02", "description": [{"lang": "en", "value": "CWE-89"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in\u00a0Archived Audit Report."}, {"lang": "es", "value": " Las versiones 7241 y anteriores de Zohocorp ManageEngine ADManager Plus son vulnerables a la inyecci\u00f3n SQL en el informe de auditor\u00eda archivado."}], "lastModified": "2024-11-05T19:44:58.650", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7927FC8C-ED61-4E24-AF57-2D5C0E06AB2A", "versionEndExcluding": "7.2"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AE608DF-E02C-4A63-AD3E-7E3C1B921C3D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72C14C6D-5C72-4A39-A8FF-93CD89C831C9"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D47DA377-0AF4-453E-9605-A5F87FA14E61"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7203:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC919233-CE66-416C-8649-B94A23F131F5"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7210:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD2880B4-88AD-49E4-B423-5C0CCCF5DF4B"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7211:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8BCAFB6-F46D-4E09-8827-13ED1A7D5740"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7212:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D0166A3-B34B-44FC-9DB8-E06BDDAC7CC8"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7220:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE25B1E5-D380-490C-98A6-121FA10A3311"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7221:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50283EE9-A9EC-4BD2-958E-F2A278B84C0B"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7222:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "645C5636-1E03-47D2-834B-3DE95B347E1F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7223:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4340408B-3928-430F-BDBA-10E43F25C595"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7224:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C792F787-B6F6-4908-923C-25679BA67988"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7230:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "826183CE-C9B9-4C34-8885-3773F42AAAB9"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7231:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7A9A00F-1792-4DAA-B393-AFAB279F850C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7232:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "250DC9F9-082E-4C3A-B0C4-681C8AFCCD50"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7240:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "308413DB-AB0D-47B1-863E-B6C4B6D88D2D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7241:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB2D7A55-BC4E-451C-BA49-AAAA5180724B"}], "operator": "OR"}]}], "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02"}