Vulnerability Description
Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings.
CVSS Score
7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zohocorp | Manageengine Admanager Plus | < 7.1 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/172755/ManageEngine-ADManager-Plus-Command-
- https://manageengine.comProduct
- https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-29084.htmVendor Advisory
- http://packetstormsecurity.com/files/172755/ManageEngine-ADManager-Plus-Command-
- https://manageengine.comProduct
- https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-29084.htmVendor Advisory
FAQ
What is CVE-2023-29084?
CVE-2023-29084 is a vulnerability with a CVSS score of 7.2 (HIGH). Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings.
How severe is CVE-2023-29084?
CVE-2023-29084 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-29084?
Check the references section above for vendor advisories and patch information. Affected products include: Zohocorp Manageengine Admanager Plus.