CVE-2024-27311: Arbitrary file writing
Published Jul 17, 2024
·Updated
Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.
Affected Software
1 affected component
ZohoCorp ManageEngine DDI Central<4002
Event History
Jul 17, 2024
CVE Published
via MITRE·10:52 AM
Data Sourced
via MITRE·10:52 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-27311?
CVE-2024-27311 is classified as a medium severity vulnerability due to its directory traversal nature.
2
How do I fix CVE-2024-27311?
To fix CVE-2024-27311, upgrade Zohocorp ManageEngine DDI Central to version 4002 or later.
3
What types of systems are affected by CVE-2024-27311?
CVE-2024-27311 affects Zohocorp ManageEngine DDI Central versions 4001 and earlier.
4
What does a directory traversal vulnerability mean in the context of CVE-2024-27311?
In CVE-2024-27311, a directory traversal vulnerability allows unauthorized users to upload files to the server file system.
5
What potential impacts does CVE-2024-27311 pose to organizations?
Exploitation of CVE-2024-27311 could lead to unauthorized file uploads, potentially compromising system integrity and data security.