PT-2020-12664

CVE-2020-11527

Published

2020-04-04

Updated

2021-07-21

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.4.181

Description The issue allows an unauthenticated remote attacker to read arbitrary files by sending a specially crafted URI.

Recommendations For versions prior to 12.4.181, update to version 12.4.181 or later to resolve the issue.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾