CVE-2022-35404

Description

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.

Related CPE's

azohocorpmanageengine_opmanager********

azohocorpmanageengine_opmanager12.5-******

azohocorpmanageengine_opmanager12.5build125233******

azohocorpmanageengine_opmanager12.5build125312******

azohocorpmanageengine_opmanager12.5build125323******

azohocorpmanageengine_opmanager12.5build125324******

azohocorpmanageengine_opmanager12.5build125326******

azohocorpmanageengine_opmanager12.5build125328******

azohocorpmanageengine_opmanager12.5build125000******

azohocorpmanageengine_opmanager12.5build125002******

References

https://manageengine.com

Vendor Advisory

https://www.manageengine.com/itom/advisory/cve-2022-35404.html

PatchVendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io