PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2022-47966 SAML ShowStopper

blog.viettelcybersecurity.com | vulnerability | CVE-2022-47966 | #rce | #manageengine | #vulnerability-analysis | #saml | #cve-2022-47966 | #xmlsec
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Viettel dissects CVE-2022-47966: legacy xmlsec in ManageEngine products runs XSLT transforms during SAML signature verification, so a crafted SAMLResponse can trigger unauthenticated RCE.
CVE
CVE-2022-47966
Published
Collected

Related coverage

vulnerability · horizon3.ai
ManageEngine CVE-2022-47966 Technical Deep Dive
# ManageEngine CVE-2022-47966 Technical Deep Dive James Horseman January 19, 2023 Attack Blogs ## Introduction On January 10, 2023, ManageEngine released a security advisory for CVE-2022-47966...
vulnerability · horizon3.ai
ManageEngine CVE-2022-47966 IOCs
# ManageEngine CVE-2022-47966 IOCs James Horseman January 13, 2023 Attack Blogs ## Introduction The recent ManageEngine CVE-2022-47966 is a pre-authentication remote code execution vulnerability....
vulnerability · bishopfox.com
Signature Optional - Analysis of CVE-2026-28323
CVE-2026-28323 is a CVSS 9.8 SAML auth bypass in SolarWinds Web Help Desk. A single forged POST request grants unauthenticated access to any valid account.
vulnerability · blog.viettelcybersecurity.com
Phân tích CVE-2024-6748
Viettel analyzes CVE-2024-6748, a CVSS 8.3 SQL injection in the URL monitoring feature of ManageEngine OpManager, exploitable by authenticated users and patched in build 128318.
vulnerability · blog.viettelcybersecurity.com
CVE-2022-21587 (Oracle E-Business Suite Unauthenticated RCE)
A walkthrough of CVE-2022-21587, unauthenticated RCE (CVSS 9.8) in Oracle EBS Web Applications Desktop Integrator's upload component, covering lab setup, EBS architecture and the vulnerable path.
vulnerability · blog.viettelcybersecurity.com
[CVE-2022-30333] Các lỗ hổng mới liên tục xuất hiện trên Zimbra - Phần II
Part two on Zimbra dissects CVE-2022-30333, an UnRAR path traversal: Windows-style symlinks inside RAR archives escape extraction, letting attackers drop a JSP webshell via Amavis and achieve RCE.
Back