Design/Logic Flaw

2020-02-0617:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

JSON

Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet.

CPENameOperatorVersion
manageengine_applications_managereq14.0 build14500
manageengine_applications_managereq14.0 build14490
manageengine_applications_managereq14.0 build14480
manageengine_applications_managereq14.0 build14470
manageengine_applications_managereq14.0 build14460
manageengine_applications_managereq14.0 build14450
manageengine_applications_managereq14.0 build14440
manageengine_applications_managereq14.0 build14430
manageengine_applications_managereq14.0 build14401
manageengine_applications_managereq14.0 build14420

Name	Operator	Version
manageengine_applications_manager	eq	14.0 build14500
manageengine_applications_manager	eq	14.0 build14490
manageengine_applications_manager	eq	14.0 build14480
manageengine_applications_manager	eq	14.0 build14470
manageengine_applications_manager	eq	14.0 build14460
manageengine_applications_manager	eq	14.0 build14450
manageengine_applications_manager	eq	14.0 build14440
manageengine_applications_manager	eq	14.0 build14430
manageengine_applications_manager	eq	14.0 build14401
manageengine_applications_manager	eq	14.0 build14420