daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2021/CVE-2021-44077.yaml

49 lines
2.0 KiB
YAML
Raw Permalink Normal View History

Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
id: CVE-2021-44077
info:
name: Zoho ManageEngine ServiceDesk Plus - Remote Code Execution
author: Adam Crosser,gy741
severity: critical
description: Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution.
Added Impact
2023-09-27 15:51:13 +00:00
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
remediation: |
Apply the latest security patch or upgrade to a patched version of Zoho ManageEngine ServiceDesk Plus.
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
reference:
- https://www.cisa.gov/uscert/ncas/alerts/aa21-336a
- https://unit42.paloaltonetworks.com/tiltedtemple-manageengine-servicedesk-plus/
- https://github.com/horizon3ai/CVE-2021-44077
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/manageengine_servicedesk_plus_cve_2021_44077.rb
Dashboard Content Enhancements (#4426) Dashboard Content Enhancements
2022-05-18 20:58:07 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-44077
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
classification:
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com>
2022-05-17 09:18:12 +00:00
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
cve-id: CVE-2021-44077
Added EPSS Percentile
2023-08-31 11:46:18 +00:00
cwe-id: CWE-306
TemplateMan Update [Sat Mar 23 09:28:19 UTC 2024] :robot:
2024-03-23 09:28:19 +00:00
epss-score: 0.97367
epss-percentile: 0.99895
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11138:*:*:*:*:*:*
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: zohocorp
product: manageengine_servicedesk_plus
product/queries updated
2024-05-31 19:23:20 +00:00
shodan-query: http.title:"manageengine servicedesk plus"
fofa-query: title="manageengine servicedesk plus"
google-query: intitle:"manageengine servicedesk plus"
auto tagging via templateman
2024-01-14 09:21:50 +00:00
tags: cve2021,cve,rce,kev,msf,zoho,manageengine,zohocorp
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
- method: GET
path:
- "{{BaseURL}}/RestAPI/ImportTechnicians"
matchers-condition: and
matchers:
- type: word
words:
- '<form name="ImportTechnicians"'
- type: status
status:
Dashboard Content Enhancements (#4426) Dashboard Content Enhancements
2022-05-18 20:58:07 +00:00
- 200
Auto Template Signing [Sat Jun 1 06:52:59 UTC 2024] :robot:
2024-06-01 06:53:00 +00:00
# digest: 4a0a0047304502201e51031026454c2aba9ab044439d17865fe5d569efc7fea71173efc4dfb63b4a022100d570787f5b40a650af825ef1d8a4813cc3488e0a9018c5f94f4e2c4b9fb701ab:922c64590222798bb761d5b6d8e72950