CVE-2022-48362

Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)

• CWE-22
• CWE-22

• https://srcincite.io/blog/2022/01/20/zohowned-a-critical-authentication-bypass-on-zoho-manageengine-desktop-central.htmlExploit, Vendor Advisory
• https://www.manageengine.com/products/desktop-central/cve-2022-48362.html
• https://srcincite.io/blog/2022/01/20/zohowned-a-critical-authentication-bypass-on-zoho-manageengine-desktop-central.htmlExploit, Vendor Advisory
• https://www.manageengine.com/products/desktop-central/cve-2022-48362.html

Published

Feb 25, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-48357Some products have the double fetch vulnerability. Successfu…7.5
• CVE-2022-48358The BatteryHealthActivity has a redirection vulnerability. S…7.4
• CVE-2022-48359The recovery mode for updates has a vulnerability that cause…7.5
• CVE-2022-4836The Breadcrumb WordPress plugin before 1.5.33 does not valid…5.4
• CVE-2022-48360The facial recognition module has a vulnerability in file pe…7.5
• CVE-2022-48361The Always On Display (AOD) has a path traversal vulnerabili…5.3
• CVE-2022-48363In MPD before 0.23.8, as used on Automotive Grade Linux and …7.5
• CVE-2022-48364The undo_mark_statuses_as_sensitive method in app/services/a…4.3
• CVE-2022-48365An issue was discovered in eZ Platform Ibexa Kernel before 1…7.2
• CVE-2022-48366An issue was discovered in eZ Platform Ibexa Kernel before 1…3.7
• CVE-2022-48367An issue was discovered in eZ Publish Ibexa Kernel before 7.…9.8
• CVE-2022-48368In audio service, there is a possible missing permission che…7.8