CVE-2022-32551: Path Traversal
Published Jul 1, 2022
·Updated
Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml).
Affected Software
6 affected components
ZohoCorp ManageEngine ServiceDesk Plus MSP<10.6
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.6
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.6-10600
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.6-10601
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.6-10602
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.6-10603
Event History
Jul 1, 2022
CVE Published
via MITRE·11:51 PM
Data Sourced
via MITRE·11:51 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-32551.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal'.
3
What is the severity of CVE-2022-32551?
The severity of CVE-2022-32551 is high.
4
Which versions of Zoho ManageEngine ServiceDesk Plus MSP are affected by this vulnerability?
Zoho ManageEngine ServiceDesk Plus MSP versions up to 10.6-10604 are affected by this vulnerability.
5
How can I fix the path traversal vulnerability in Zoho ManageEngine ServiceDesk Plus MSP?
To fix the path traversal vulnerability in Zoho ManageEngine ServiceDesk Plus MSP, it is recommended to update to version 10.6-10604 or later.