CVE-2019-12133

Severity Score

7.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Moreover, the services associated with said products try to execute binaries such as sc.exe from the current directory upon system start. This will effectively allow non-privileged users to escalate privileges to NT AUTHORITY\SYSTEM. This affects Desktop Central 10.0.380, EventLog Analyzer 12.0.2, ServiceDesk Plus 10.0.0, SupportCenter Plus 8.1, O365 Manager Plus 4.0, Mobile Device Manager Plus 9.0.0, Patch Connect Plus 9.0.0, Vulnerability Manager Plus 9.0.0, Patch Manager Plus 9.0.0, OpManager 12.3, NetFlow Analyzer 11.0, OpUtils 11.0, Network Configuration Manager 11.0, FireWall 12.0, Key Manager Plus 5.6, Password Manager Pro 9.9, Analytics Plus 1.0, and Browser Security Plus.

Varios productos Zoho ManageEngine sufren una escalada de privilegios locales debido a permisos inapropiados para el directorio %SYSTEMDRIVE%\ManageEngine y sus subcarpetas. Además, los servicios asociados con dichos productos intentan ejecutar archivos binarios como sc.exe desde el directorio actual durante un inicio de sistema. Esto permitirá efectivamente a los usuarios no privilegiados escalar sus privilegios a NT AUTHORITY\SYSTEM. Esto afecta a Desktop Central versión 10.0.380, EventLog Analyzer versión 12.0.2, ServiceDesk Plus versión 10.0.0, SupportCenter Plus versión 8.1, O365 Manager Plus versión 4.0, Mobile Device Manager Plus versión 9.0.0, Patch Connect Plus versión 9.0.0, Vulnerability Manager Plus versión 9.0.0 , Patch Manager Plus versión 9.0.0, OpManager versión 12.3, NetFlow Analyzer versión 11.0, OpUtils versión 11.0, Network Configuration Manager versión 11.0, FireWall versión 12.0, Key Manager Plus versión 5.6, Password Manager Pro versión 9.9, Analytics Plus versión 1.0 y Browser Security Plus.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-05-15 CVE Reserved
2019-06-18 CVE Published
2023-07-12 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-427: Uncontrolled Search Path Element
CWE-732: Incorrect Permission Assignment for Critical Resource

CAPEC

References (2)

URL	Tag	Source
https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-007.md	X_refsource_misc

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.manageengine.com/products/desktop-central/elevation-of-privilege-vulnerability.html	2020-08-24

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Zohocorp Search vendor "Zohocorp"		Manageengine Analytics Plus Search vendor "Zohocorp" for product "Manageengine Analytics Plus"				1.0 Search vendor "Zohocorp" for product "Manageengine Analytics Plus" and version "1.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Browser Security Plus Search vendor "Zohocorp" for product "Manageengine Browser Security Plus"				-		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Desktop Central Search vendor "Zohocorp" for product "Manageengine Desktop Central"				10.0.380 Search vendor "Zohocorp" for product "Manageengine Desktop Central" and version "10.0.380"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Eventlog Analyzer Search vendor "Zohocorp" for product "Manageengine Eventlog Analyzer"				12.0.2 Search vendor "Zohocorp" for product "Manageengine Eventlog Analyzer" and version "12.0.2"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Firewall Search vendor "Zohocorp" for product "Manageengine Firewall"				12.0 Search vendor "Zohocorp" for product "Manageengine Firewall" and version "12.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Key Manager Plus Search vendor "Zohocorp" for product "Manageengine Key Manager Plus"				5.6 Search vendor "Zohocorp" for product "Manageengine Key Manager Plus" and version "5.6"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Mobile Device Manager Plus Search vendor "Zohocorp" for product "Manageengine Mobile Device Manager Plus"				9.0.0 Search vendor "Zohocorp" for product "Manageengine Mobile Device Manager Plus" and version "9.0.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Netflow Analyzer Search vendor "Zohocorp" for product "Manageengine Netflow Analyzer"				11.0 Search vendor "Zohocorp" for product "Manageengine Netflow Analyzer" and version "11.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Network Configuration Manager Search vendor "Zohocorp" for product "Manageengine Network Configuration Manager"				11.0 Search vendor "Zohocorp" for product "Manageengine Network Configuration Manager" and version "11.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine O365 Manager Plus Search vendor "Zohocorp" for product "Manageengine O365 Manager Plus"				4.0 Search vendor "Zohocorp" for product "Manageengine O365 Manager Plus" and version "4.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Opmanager Search vendor "Zohocorp" for product "Manageengine Opmanager"				12.3 Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.3"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Oputils Search vendor "Zohocorp" for product "Manageengine Oputils"				11.0 Search vendor "Zohocorp" for product "Manageengine Oputils" and version "11.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Password Manager Pro Search vendor "Zohocorp" for product "Manageengine Password Manager Pro"				9.9 Search vendor "Zohocorp" for product "Manageengine Password Manager Pro" and version "9.9"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Patch Connect Plus Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"				9.0.0 Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Patch Manager Plus Search vendor "Zohocorp" for product "Manageengine Patch Manager Plus"				9.0.0 Search vendor "Zohocorp" for product "Manageengine Patch Manager Plus" and version "9.0.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"				10.0.0 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "10.0.0"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"				8.1 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "8.1"		-		Affected
Zohocorp Search vendor "Zohocorp"		Manageengine Vulnerability Manager Plus Search vendor "Zohocorp" for product "Manageengine Vulnerability Manager Plus"				9.0.0 Search vendor "Zohocorp" for product "Manageengine Vulnerability Manager Plus" and version "9.0.0"		-		Affected