CVE-2022-28219

Description

Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.

Affected Platforms

Weakness Type

CWE-611

References

• http://cewolf.sourceforge.net/new/index.html
• http://packetstormsecurity.com/files/167997/ManageEngine-ADAudit-Plus-Path-Trave…
• https://manageengine.com
• https://www.horizon3.ai/red-team-blog-cve-2022-28219/
• https://www.manageengine.com/products/active-directory-audit/cve-2022-28219.html
• http://cewolf.sourceforge.net/new/index.html