Lucene search

[email protected]CVE-2020-10816

HistoryOct 08, 2020 - 5:15 p.m.

CVE-2020-10816

2020-10-0817:15:12

CWE-287

[email protected]

web.nvd.nist.gov

zoho

manageengine

applications manager

cve-2020-10816

nvd

vulnerability

remote attack

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.5%

JSON

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet.

Affected configurations

NVD

Node

zohocorpmanageengine_applications_managerMatch14.7-

zohocorpmanageengine_applications_managerMatch14.7build14700

zohocorpmanageengine_applications_managerMatch14.7build14710

zohocorpmanageengine_applications_managerMatch14.7build14720

zohocorpmanageengine_applications_managerMatch14.7build14730

zohocorpmanageengine_applications_managerMatch14.7build14740

zohocorpmanageengine_applications_managerMatch14.7build14750

zohocorpmanageengine_applications_managerMatch14.7build14760

zohocorpmanageengine_applications_managerMatch14.7build14770

zohocorpmanageengine_applications_managerMatch14.7build14780

CPENameOperatorVersion
zohocorp:manageengine_applications_managerzohocorp manageengine applications managereq14.7

CPE	Name	Operator	Version
zohocorp:manageengine_applications_manager	zohocorp manageengine applications manager	eq	14.7

References

gitlab.com/eLeN3Re/CVE-2020-10816

www.manageengine.com/au/products/applications_manager/security-updates/security-updates-cve-2020-10816.html

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.5%

JSON

Related for CVE-2020-10816

nvd1 prion1 cvelist1