CVE-2024-27311

Published: Jul 17, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

Affected (1)

Products: Zohocorp: Manageengine Ddi Central

Zohocorp

1 product

Manageengine Ddi Central

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Ddi Central	Before 4002

Related CWEs

CWE-434

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (2)

https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2024-27311.html

Source: 0fc0942c-577d-436f-ae8e-945763c79b02

Vendor Advisory

https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2024-27311.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.