writeups.xyz / Manage Engine OpManager Multiple Authenticated RCE Vulnerabilities

Submitter : c2a

Date: 18 June 2018

Bounty : undisclosed

Vulnerabilities :

• RCE
• Path Traversal
• Unrestricted File Upload
• Information Disclosure
• Arbitrary File Write

Programs :

• Zoho (ManageEngine)

Authors :

• Denis Andzakovic

Link :
https://pulsesecurity.co.nz/advisories/ManageEngine-OpManager-RCE