CVE-2021-20078

2021-04-0118:03:48

tenable

www.cve.org

manage engine opmanager

vulnerability

path traversal

spark gateway

remote attacker

denial of service

AI Score

9.2

Confidence

High

EPSS

0.142

Percentile

95.7%

JSON

Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS.

CNA Affected

[
  {
    "product": "Manage Engine OpManager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version build 125346"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2021-10