CVE-2022-42904: Command Injection
Published Nov 18, 2022
·Updated
Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings.
Affected Software
27 affected components
ZohoCorp ManageEngine ADManager Plus<7.1
ZohoCorp ManageEngine ADManager Plus=7.1
ZohoCorp ManageEngine ADManager Plus=7.1-7100
ZohoCorp ManageEngine ADManager Plus=7.1-7101
ZohoCorp ManageEngine ADManager Plus=7.1-7102
ZohoCorp ManageEngine ADManager Plus=7.1-7110
ZohoCorp ManageEngine ADManager Plus=7.1-7111
ZohoCorp ManageEngine ADManager Plus=7.1-7112
ZohoCorp ManageEngine ADManager Plus=7.1-7113
ZohoCorp ManageEngine ADManager Plus=7.1-7114
ZohoCorp ManageEngine ADManager Plus=7.1-7115
ZohoCorp ManageEngine ADManager Plus=7.1-7116
ZohoCorp ManageEngine ADManager Plus=7.1-7117
ZohoCorp ManageEngine ADManager Plus=7.1-7118
ZohoCorp ManageEngine ADManager Plus=7.1-7120
ZohoCorp ManageEngine ADManager Plus=7.1-7121
ZohoCorp ManageEngine ADManager Plus=7.1-7122
ZohoCorp ManageEngine ADManager Plus=7.1-7123
ZohoCorp ManageEngine ADManager Plus=7.1-7124
ZohoCorp ManageEngine ADManager Plus=7.1-7125
ZohoCorp ManageEngine ADManager Plus=7.1-7126
ZohoCorp ManageEngine ADManager Plus=7.1-7130
ZohoCorp ManageEngine ADManager Plus=7.1-7131
ZohoCorp ManageEngine ADManager Plus=7.1-7140
ZohoCorp ManageEngine ADManager Plus=7.1-7141
ZohoCorp ManageEngine ADManager Plus=7.1-7150
ZohoCorp ManageEngine ADManager Plus=7.1-7151
Event History
Nov 18, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-42904.
2
What is the title of the vulnerability?
The title of the vulnerability is 'Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings.'
3
What is the affected software?
The affected software is Zohocorp Manageengine Admanager Plus version up to and including 7.1-7151.
4
What is the severity of CVE-2022-42904?
The severity of CVE-2022-42904 is high (CVSS score: 7.2).
5
How can I fix the vulnerability?
To fix the vulnerability, update Zohocorp Manageengine Admanager Plus to version 7.1-7152 or later.