Posted by Pedro Ribeiro on Dec 03

Hi,

This is part 9 of the ManageOwnage series. For previous parts see [1].

Today we have yet another 0 day – an arbitrary file download
vulnerability that be exploited unauthenticated in NetFlow Analyzer
and authenticated in IT360.
I’m releasing this as a 0 day because ManageEngine have been making a
fool out of me for 105 days. I have asked them “are you releasing a
fix soon?” at least a couple of times every month to which they…