CVE-2022-36923 PoC — 多款ZOHO ManageEngine产品安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36923.yaml

Associated Vulnerability

Title:多款ZOHO ManageEngine产品安全漏洞 (CVE-2022-36923)
Description:ZOHO ManageEngine OpManager等都是印度卓豪（ZOHO）公司的产品。ZOHO ManageEngine OpManager是一款综合性网络监控软件。ZOHO ManageEngine OpManager Plus是一个适用于 Windows 和 Linux 系统的 IT 运营管理解决方案。ZOHO ManageEngine OpManager MSP是一款易于使用的网络和服务器管理软件。 ZOHO ManageEngine 存在安全漏洞，该漏洞源于未经身份验证的攻击者可以获取用户的

Description

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user's API key, and then access external APIs.

File Snapshot


 id: CVE-2022-36923

info:
  name: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Networ

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!