daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2021/CVE-2021-44077.yaml

46 lines
1.7 KiB
YAML
Raw Normal View History

Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
id: CVE-2021-44077
info:
name: Zoho ManageEngine ServiceDesk Plus - Remote Code Execution
author: Adam Crosser,gy741
severity: critical
description: Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution.
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
remediation: |
Apply the latest security patch or upgrade to a patched version of Zoho ManageEngine ServiceDesk Plus.
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
reference:
- https://www.cisa.gov/uscert/ncas/alerts/aa21-336a
- https://unit42.paloaltonetworks.com/tiltedtemple-manageengine-servicedesk-plus/
- https://github.com/horizon3ai/CVE-2021-44077
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/manageengine_servicedesk_plus_cve_2021_44077.rb
Dashboard Content Enhancements (#4426) Dashboard Content Enhancements
2022-05-18 20:58:07 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-44077
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
classification:
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com>
2022-05-17 09:18:12 +00:00
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
cve-id: CVE-2021-44077
Added EPSS Percentile
2023-08-31 11:46:18 +00:00
cwe-id: CWE-306
templateman update
2023-10-14 11:27:55 +00:00
epss-score: 0.97194
TemplateMan Update [Tue Oct 31 18:27:55 UTC 2023] :robot:
2023-10-31 18:27:55 +00:00
epss-percentile: 0.99753
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11138:*:*:*:*:*:*
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: zohocorp
product: manageengine_servicedesk_plus
tags: rce,kev,msf,cve,cve2021,zoho,manageengine
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Created Template for CVE-2021-44077 (#4129) * Created Template for CVE-2021-44077 * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 09:45:34 +00:00
- method: GET
path:
- "{{BaseURL}}/RestAPI/ImportTechnicians"
matchers-condition: and
matchers:
- type: word
words:
- '<form name="ImportTechnicians"'
- type: status
status:
Dashboard Content Enhancements (#4426) Dashboard Content Enhancements
2022-05-18 20:58:07 +00:00
- 200
TemplateMan Update [Wed Nov 1 14:45:21 UTC 2023] :robot:
2023-11-01 14:45:21 +00:00
# digest: 4a0a00473045022100da072cd0276bf036d201bf50a932c507b88c69a86fc959db190f6cf546b0610d02204d5a5027d32eca61ee25bc01fddb76b80b6a9701d59b78fd0da0e507300839d0:922c64590222798bb761d5b6d8e72950