CVE-2021-42002: Critical severity zoho corporation admanager plus vulnerability
Published Nov 11, 2021
·Updated
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution.
Affected Software
10 affected components
ZohoCorp ManageEngine ADManager Plus<7.1
ZohoCorp ManageEngine ADManager Plus=7.1
ZohoCorp ManageEngine ADManager Plus=7.1-7100
ZohoCorp ManageEngine ADManager Plus=7.1-7101
ZohoCorp ManageEngine ADManager Plus=7.1-7102
ZohoCorp ManageEngine ADManager Plus=7.1-7110
ZohoCorp ManageEngine ADManager Plus=7.1-7111
ZohoCorp ManageEngine ADManager Plus=7.1-7112
ZohoCorp ManageEngine ADManager Plus=7.1-7113
ZohoCorp ManageEngine ADManager Plus=7.1-7114
Event History
Nov 11, 2021
CVE Published
via MITRE·04:33 AM
Data Sourced
via MITRE·04:33 AM
Description
Data Sourced
via NVD·05:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-42002?
CVE-2021-42002 is a vulnerability in Zoho ManageEngine ADManager Plus before version 7115 that allows for a filter bypass leading to file-upload remote code execution.
2
Which software versions are affected by CVE-2021-42002?
Zoho ManageEngine ADManager Plus versions up to and including 7.1-7114 are affected by CVE-2021-42002.
3
How severe is CVE-2021-42002?
CVE-2021-42002 is considered a critical vulnerability with a severity rating of 9.8.
4
How can I fix CVE-2021-42002?
To fix CVE-2021-42002, it is recommended to update Zoho ManageEngine ADManager Plus to version 7.1-7115 or higher.
5
Where can I find more information about CVE-2021-42002?
You can find more information about CVE-2021-42002 [here](https://www.manageengine.com/products/ad-manager/release-notes.html#7115).