Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2019-17421

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a malicious payload.

  • Published: Nov 21, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-17421
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
zohocorp / manageengine_firewall_analyzer 12.4-124072 12.4-124072.x
zohocorp / manageengine_opmanager 12.4-build124072 12.4-build124072.x