PT-2020-13045 · Zoho · Zoho Manageengine Opmanager
CVE-2020-12116
·
Published
2020-05-07
·
Updated
2021-07-21
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine OpManager versions prior to 124196 (Stable build) and prior to 125125 (Released build)
Description
The issue allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request.
Recommendations
For versions prior to 124196 (Stable build) and prior to 125125 (Released build), update to a version that is 124196 or later for Stable builds, or 125125 or later for Released builds.
Exploit
Fix
DoS
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Zoho Manageengine Opmanager