CVE-2021-40175: Malicious File Upload
Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Zoho ManageEngine Log360to a version that resolves this vulnerability.Fixed in 5219
Event History
Frequently Asked Questions
What is CVE-2021-40175?
CVE-2021-40175 is a vulnerability in Zoho ManageEngine Log360 before Build 5219 that allows unrestricted file upload with resultant remote code execution.
What is the severity of CVE-2021-40175?
The severity of CVE-2021-40175 is critical with a severity value of 9.8.
What software is affected by CVE-2021-40175?
Zoho ManageEngine Log360 versions 5.1 to 5.2-build5218 are affected by CVE-2021-40175.
How can I fix CVE-2021-40175?
To fix CVE-2021-40175, you should upgrade Zoho ManageEngine Log360 to build 5219 or later.
Where can I find more information about CVE-2021-40175?
You can find more information about CVE-2021-40175 in the Readme document for Zoho ManageEngine Log360 Build 5219: [link](https://www.manageengine.com/log-management/readme.html#Build%205219).