CVE-2021-40172

Published: Aug 29, 2021Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.

Affected (10)

Products: Zohocorp: Manageengine Log360

1 product

Manageengine Log360

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Log360	5.0 ≤ version ≤ 5.1
Zohocorp Manageengine Log360	Version 5.2 build5200
Zohocorp Manageengine Log360	Version 5.2 build5201
Zohocorp Manageengine Log360	Version 5.2 build5206
Zohocorp Manageengine Log360	Version 5.2 build5209
Zohocorp Manageengine Log360	Version 5.2 build5210
Zohocorp Manageengine Log360	Version 5.2 build5211
Zohocorp Manageengine Log360	Version 5.2 build5213
Zohocorp Manageengine Log360	Version 5.2 build5214
Zohocorp Manageengine Log360	Version 5.2 build5218

Related CWEs

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://www.manageengine.com/log-management/readme.html#Build%205219

Source: cve@mitre.org

Release NotesVendor Advisory

https://www.manageengine.com/log-management/readme.html#Build%205219

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.