Zoho Corporation ManageEngine Log360 5.3 Build5233
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_log360:5.3:build5233:*:*:*:*:*:*
part: a version: 5.3 update: build5233
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Log360 (78b719bd-ebae-5946-83f9-ed473d6915ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-20136 |
vulnerable | 2026-06-08 05:29:08.583271 |
Details available
ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log360 to restart. An attacker can leverage this vulnerability to achieve remote code execution by replacing files executed by Log360 on startup.
Published: 2021-11-01T20:55:59.000Z
Updated: 2024-08-03T17:30:07.391Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.