ManageEngine ADAudit Plus CVE-2022-28219
Title source: metasploitExploitation Summary
CVE-2022-28219 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including horizon3ai, rbowes-r7, aeifkz, including a Metasploit module exploits/windows/http/manageengine_adaudit_plus_cve_2022_28219.
A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits CVE-2022-28219, a deserialization vulnerability in Apache Solr, by crafting a malicious XML payload with XXE and Java deserialization to achieve remote code execution. It includes a custom web server to host malicious DTD and JAR files for payload delivery.
Description
Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.
Exploits (4)
This PoC exploits CVE-2022-28219, a deserialization vulnerability in Apache Solr, by crafting a malicious XML payload with XXE and Java deserialization to achieve remote code execution. It includes a custom web server to host malicious DTD and JAR files for payload delivery.
This repository contains a proof-of-concept exploit for CVE-2022-28219, an XXE vulnerability in ManageEngine ADAudit Plus. The exploit demonstrates file reading, password hash retrieval, and arbitrary file planting via XXE and deserialization attacks.
This repository contains a stub implementation mimicking CVE-2022-28219, focusing on XML parsing in a servlet. It lacks exploit payloads or offensive techniques, serving as a basic test environment.
This Metasploit module exploits CVE-2022-28219, a combination of path traversal and blind XXE vulnerabilities in ManageEngine ADAudit Plus to upload and execute a malicious payload. It leverages Java deserialization for remote code execution.
Nuclei Templates (1)
http.title:"ADAudit Plus" || http.title:"ManageEngine - ADManager Plus" || http.title:"adaudit plus" || http.title:"manageengine - admanager plus"
title="adaudit plus" || http.title:"manageengine - admanager plus"
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H