CVEs-PoC/2015/CVE-2015-7765.md

CVE-2015-7765

Description

ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain administrator access by leveraging knowledge of this password.

POC

Reference

• http://packetstormsecurity.com/files/133596/ManageEngine-OpManager-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/133596/ManageEngine-OpManager-Remote-Code-Execution.html
• http://seclists.org/fulldisclosure/2015/Sep/66
• http://seclists.org/fulldisclosure/2015/Sep/66
• https://www.exploit-db.com/exploits/38221/
• https://www.exploit-db.com/exploits/38221/

Github

• https://github.com/hdm/juniper-cve-2015-7755