1. Home
  2. CVE Database
  3. CVE-2024-27311
MEDIUM · 5.5

CVE-2024-27311

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

Vulnerability Description

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
ZohocorpManageengine Ddi Central< 4002

Related Weaknesses (CWE)

CWE-434

References

FAQ

What is CVE-2024-27311?

CVE-2024-27311 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

How severe is CVE-2024-27311?

CVE-2024-27311 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-27311?

Check the references section above for vendor advisories and patch information. Affected products include: Zohocorp Manageengine Ddi Central.