0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
ManageEngine OpManager 12.3 Privilege Escalation Vulnerability
[ManageEngine OpManager Privilege Escalation
Vendor: Zoho Corporation Pvt. Ltd.
Product web page: https://www.manageengine.com
Affected version: 12.3
Summary: OpManager offers comprehensive network monitoring capabilities
that help you monitor network performance, detect network faults in real
time, troubleshoot errors, and prevent downtime. Being a powerful network
monitor, it supports multi-vendor IT environments and can scale to fit your
network, regardless of its size. Monitor your devices and network to gain
complete visibility and control over your entire network infrastructure.
It allows you to monitor critical performance metrics like availability,
CPU, disk space, and memory utilization across physical and virtual servers.
Description: The OpManager Monitoring service suffers from a weak permissions
issue in which an attacker can replace the service binary with a binary of his
choice. This service runs as Localsystem thus allowing for a privilege escalation
vector.
Tested on: Microsoft Windows 7 x64
Vulnerability discovered by Humberto Cabrera
@zeroscience
Advisory ID: ZSL-2019-5504
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5504.php
14.01.2019
--
C:\Users\User>sc qc opmanager
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: opmanager
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\ManageEngine\OpManager\bin\wrapper.exe -s C:\ManageEngine\OpManager\conf\wrapper.conf
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : ManageEngine OpManager
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
C:\ManageEngine\OpManager\bin>icacls wrapper.exe
wrapper.exe BUILTIN\Administrators:(I)(F)
NT AUTHORITY\SYSTEM:(I)(F)
BUILTIN\Users:(I)(RX)
NT AUTHORITY\Authenticated Users:(I)(M) <==- Weak Permissions allowing the modification of the service binary
# 0day.today [2024-11-15] #