CVE-2023-47211: Path Traversal

Published Jan 8, 2024
·
Updated

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.

Affected Software

97 affected components
ZohoCorp Manageengine Firewall Analyzer<12.7
ZohoCorp Manageengine Firewall Analyzer=12.7-build127000
ZohoCorp Manageengine Firewall Analyzer=12.7-build127101
ZohoCorp Manageengine Firewall Analyzer=12.7-build127130
ZohoCorp Manageengine Firewall Analyzer=12.7-build127131
ZohoCorp Manageengine Firewall Analyzer=12.7-build127187
ZohoCorp Manageengine Firewall Analyzer=12.7-build127244
ZohoCorp Manageengine Firewall Analyzer=12.7-build127257
ZohoCorp Manageengine Firewall Analyzer=12.7-build127259
ZohoCorp Manageengine Netflow Analyzer<12.7
ZohoCorp Manageengine Netflow Analyzer=12.7-build127000
ZohoCorp Manageengine Netflow Analyzer=12.7-build127003
ZohoCorp Manageengine Netflow Analyzer=12.7-build127101
ZohoCorp Manageengine Netflow Analyzer=12.7-build127130
ZohoCorp Manageengine Netflow Analyzer=12.7-build127131
ZohoCorp Manageengine Netflow Analyzer=12.7-build127187
ZohoCorp Manageengine Netflow Analyzer=12.7-build127244
ZohoCorp Manageengine Netflow Analyzer=12.7-build127255
ZohoCorp Manageengine Netflow Analyzer=12.7-build127257
ZohoCorp Manageengine Netflow Analyzer=12.7-build127259
Zohocorp Manageengine Network Configuration Manager<12.7
Zohocorp Manageengine Network Configuration Manager=12.7-build127000
Zohocorp Manageengine Network Configuration Manager=12.7-build127102
Zohocorp Manageengine Network Configuration Manager=12.7-build127105
Zohocorp Manageengine Network Configuration Manager=12.7-build127132
Zohocorp Manageengine Network Configuration Manager=12.7-build127243
Zohocorp Manageengine Network Configuration Manager=12.7-build127257
Zohocorp Manageengine Network Configuration Manager=12.7-build127259
Zohocorp ManageEngine OpManager<12.7
Zohocorp ManageEngine OpManager=12.7-build127000
Zohocorp ManageEngine OpManager=12.7-build127001
Zohocorp ManageEngine OpManager=12.7-build127002
Zohocorp ManageEngine OpManager=12.7-build127003
Zohocorp ManageEngine OpManager=12.7-build127004
Zohocorp ManageEngine OpManager=12.7-build127100
Zohocorp ManageEngine OpManager=12.7-build127101
Zohocorp ManageEngine OpManager=12.7-build127102
Zohocorp ManageEngine OpManager=12.7-build127103
Zohocorp ManageEngine OpManager=12.7-build127104
Zohocorp ManageEngine OpManager=12.7-build127109
Zohocorp ManageEngine OpManager=12.7-build127116
Zohocorp ManageEngine OpManager=12.7-build127117
Zohocorp ManageEngine OpManager=12.7-build127118
Zohocorp ManageEngine OpManager=12.7-build127119
Zohocorp ManageEngine OpManager=12.7-build127120
Zohocorp ManageEngine OpManager=12.7-build127122
Zohocorp ManageEngine OpManager=12.7-build127123
Zohocorp ManageEngine OpManager=12.7-build127131
Zohocorp ManageEngine OpManager=12.7-build127133
Zohocorp ManageEngine OpManager=12.7-build127134
Zohocorp ManageEngine OpManager=12.7-build127136
Zohocorp ManageEngine OpManager=12.7-build127138
Zohocorp ManageEngine OpManager=12.7-build127140
Zohocorp ManageEngine OpManager=12.7-build127141
Zohocorp ManageEngine OpManager=12.7-build127185
Zohocorp ManageEngine OpManager=12.7-build127186
Zohocorp ManageEngine OpManager=12.7-build127187
Zohocorp ManageEngine OpManager=12.7-build127188
Zohocorp ManageEngine OpManager=12.7-build127189
Zohocorp ManageEngine OpManager=12.7-build127191
Zohocorp ManageEngine OpManager=12.7-build127240
Zohocorp ManageEngine OpManager=12.7-build127241
Zohocorp ManageEngine OpManager=12.7-build127242
Zohocorp ManageEngine OpManager=12.7-build127243
Zohocorp ManageEngine OpManager=12.7-build127255
Zohocorp ManageEngine OpManager=12.7-build127256
Zohocorp ManageEngine OpManager=12.7-build127257
Zohocorp ManageEngine OpManager=12.7-build127258
Zohocorp ManageEngine OpManager=12.7-build127259
Zohocorp Manageengine Opmanager Msp<12.7
Zohocorp Manageengine Opmanager Msp=12.7-build127109
Zohocorp Manageengine Opmanager Msp=12.7-build127122
Zohocorp Manageengine Opmanager Msp=12.7-build127123
Zohocorp Manageengine Opmanager Msp=12.7-build127138
Zohocorp Manageengine Opmanager Msp=12.7-build127139
Zohocorp Manageengine Opmanager Msp=12.7-build127140
Zohocorp Manageengine Opmanager Msp=12.7-build127141
Zohocorp Manageengine Opmanager Msp=12.7-build127142
Zohocorp Manageengine Opmanager Msp=12.7-build127259
ZohoCorp Manageengine Opmanager Plus<12.7
ZohoCorp Manageengine Opmanager Plus=12.7-build127109
ZohoCorp Manageengine Opmanager Plus=12.7-build127122
ZohoCorp Manageengine Opmanager Plus=12.7-build127123
ZohoCorp Manageengine Opmanager Plus=12.7-build127138
ZohoCorp Manageengine Opmanager Plus=12.7-build127139
ZohoCorp Manageengine Opmanager Plus=12.7-build127140
ZohoCorp Manageengine Opmanager Plus=12.7-build127141
ZohoCorp Manageengine Opmanager Plus=12.7-build127142
ZohoCorp Manageengine Opmanager Plus=12.7-build127259
Zohocorp Manageengine Oputils<12.7
Zohocorp Manageengine Oputils=12.7-build127101
Zohocorp Manageengine Oputils=12.7-build127117
Zohocorp Manageengine Oputils=12.7-build127134
Zohocorp Manageengine Oputils=12.7-build127241
Zohocorp Manageengine Oputils=12.7-build127242
Zohocorp Manageengine Oputils=12.7-build127258
Zohocorp Manageengine Oputils=12.7-build127259

Event History

Jan 8, 2024
CVE Published
via MITRE·02:45 PM
Data Sourced
via MITRE·02:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-47211?

CVE-2023-47211 has been identified as a high severity vulnerability due to its potential for arbitrary file creation.

2

How do I fix CVE-2023-47211?

To fix CVE-2023-47211, you should update to the latest patched version of ManageEngine OpManager.

3

What impact can CVE-2023-47211 have on my system?

CVE-2023-47211 can lead to unauthorized file creation, potentially compromising system integrity and security.

4

Which versions of ManageEngine are affected by CVE-2023-47211?

CVE-2023-47211 affects ManageEngine OpManager versions prior to 12.7.259.

5

What type of attack can exploit CVE-2023-47211?

CVE-2023-47211 can be exploited through a specially crafted HTTP request that targets the uploadMib functionality.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203