CVE-2022-23779
MEDIUM NUCLEIManageEngine Desktop Central < 10.1.2137.8 - Unauthenticated Sensitive Information Exposure via HTTP Redirect
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-23779. PoCs published by Vulnmachines, fbusr, Rishi-kaul. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a writeup and proof-of-concept for CVE-2022-23779, an internal hostname disclosure vulnerability in Zoho products. The exploit involves sending a curl request to a specific endpoint and analyzing the HTTP redirect response header to disclose internal hostnames.
Description
Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses.
Exploits (3)
This repository provides a writeup and proof-of-concept for CVE-2022-23779, an internal hostname disclosure vulnerability in Zoho products. The exploit involves sending a curl request to a specific endpoint and analyzing the HTTP redirect response header to disclose internal hostnames.
This PoC exploits an information disclosure vulnerability in Zoho ManageEngine Desktop Central by sending an HTTP GET request to '/themes' on port 8020 and extracting the internal hostname from the 'Location' header in the redirect response.
This repository provides a detailed writeup and proof-of-concept for CVE-2022-23779, an information disclosure vulnerability in Zoho ManageEngine Desktop Central. The vulnerability allows unauthorized users to leak internal server hostnames via HTTP redirect headers.
Nuclei Templates (1)
http.title:"manageengine desktop central 10"
app="ZOHO-ManageEngine-Desktop" || title="manageengine desktop central 10" || app="zoho-manageengine-desktop"
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N