CVE:CVE-2021-44650
CNNVD:CNNVD-202201-974
Zoho ManageEngine M365 Manager Plus是印度Zoho公司的一个广泛的 Microsoft 365 工具。用于报告、管理、监控、审核和创建关键活动的警报。
Zoho ManageEngine M365 Manager Plus 在 Build 4419 之前的版本存在安全漏洞，该漏洞允许在通过 Admin ProxySettings 和 Tenant ProxySettings 组件更新代理设置时执行远程命令。
solution:Upgrade zohocorp manageengine_m365_manager_plus to a higher version than 4.4,4.4,4.4:build4400,4.4:build4401,4.4:build4402,4.4:build4403,4.4:build4406,4.4:build4407,4.4:build4408,4.4:build4410,4.4:build4411,4.4:build4412,4.4:build4413,4.4:build4414,4.4:build4415,4.4:build4416,4.4:build4417,4.4:build4418,and avoid the version (,4.4),4.4,4.4:build4400,4.4:build4401,4.4:build4402,4.4:build4403,4.4:build4406,4.4:build4407,4.4:build4408,4.4:build4410,4.4:build4411,4.4:build4412,4.4:build4413,4.4:build4414,4.4:build4415,4.4:build4416,4.4:build4417,4.4:build4418