CVE-2024-27311CWE-434

Arbitrary file writing

Medium · published July 17, 2024

CVSS v3.1
5.5
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01459 · 73.3th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-07-17T10:52Z
EPSS history
Timeline
  • 17 JUL 10:52Z
    Arbitrary file writing
    cvelistv5