CVE-2020-11527: High severity manageengine opmanager msp vulnerability
Published Apr 4, 2020
·Updated
In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files.
Affected Software
55 affected components
ZohoCorp ManageEngine OpManager<12.4
ZohoCorp ManageEngine OpManager=12.4
ZohoCorp ManageEngine OpManager=12.4-build124000
ZohoCorp ManageEngine OpManager=12.4-build124011
ZohoCorp ManageEngine OpManager=12.4-build124012
ZohoCorp ManageEngine OpManager=12.4-build124013
ZohoCorp ManageEngine OpManager=12.4-build124014
ZohoCorp ManageEngine OpManager=12.4-build124015
ZohoCorp ManageEngine OpManager=12.4-build124016
ZohoCorp ManageEngine OpManager=12.4-build124022
ZohoCorp ManageEngine OpManager=12.4-build124023
ZohoCorp ManageEngine OpManager=12.4-build124024
ZohoCorp ManageEngine OpManager=12.4-build124025
ZohoCorp ManageEngine OpManager=12.4-build124026
ZohoCorp ManageEngine OpManager=12.4-build124027
ZohoCorp ManageEngine OpManager=12.4-build124030
ZohoCorp ManageEngine OpManager=12.4-build124033
ZohoCorp ManageEngine OpManager=12.4-build124037
ZohoCorp ManageEngine OpManager=12.4-build124039
ZohoCorp ManageEngine OpManager=12.4-build124040
ZohoCorp ManageEngine OpManager=12.4-build124041
ZohoCorp ManageEngine OpManager=12.4-build124042
ZohoCorp ManageEngine OpManager=12.4-build124043
ZohoCorp ManageEngine OpManager=12.4-build124051
ZohoCorp ManageEngine OpManager=12.4-build124053
ZohoCorp ManageEngine OpManager=12.4-build124054
ZohoCorp ManageEngine OpManager=12.4-build124056
ZohoCorp ManageEngine OpManager=12.4-build124058
ZohoCorp ManageEngine OpManager=12.4-build124065
ZohoCorp ManageEngine OpManager=12.4-build124066
ZohoCorp ManageEngine OpManager=12.4-build124067
ZohoCorp ManageEngine OpManager=12.4-build124069
ZohoCorp ManageEngine OpManager=12.4-build124070
ZohoCorp ManageEngine OpManager=12.4-build124071
ZohoCorp ManageEngine OpManager=12.4-build124074
ZohoCorp ManageEngine OpManager=12.4-build124075
ZohoCorp ManageEngine OpManager=12.4-build124081
ZohoCorp ManageEngine OpManager=12.4-build124082
ZohoCorp ManageEngine OpManager=12.4-build124085
ZohoCorp ManageEngine OpManager=12.4-build124086
ZohoCorp ManageEngine OpManager=12.4-build124087
ZohoCorp ManageEngine OpManager=12.4-build124089
ZohoCorp ManageEngine OpManager=12.4-build124095
ZohoCorp ManageEngine OpManager=12.4-build124096
ZohoCorp ManageEngine OpManager=12.4-build124097
ZohoCorp ManageEngine OpManager=12.4-build124098
ZohoCorp ManageEngine OpManager=12.4-build124099
ZohoCorp ManageEngine OpManager=12.4-build124100
ZohoCorp ManageEngine OpManager=12.4-build124101
ZohoCorp ManageEngine OpManager=12.4-build124102
ZohoCorp ManageEngine OpManager=12.4-build124168
ZohoCorp ManageEngine OpManager=12.4-build124169
ZohoCorp ManageEngine OpManager=12.4-build124175
ZohoCorp ManageEngine OpManager=12.4-build124176
ZohoCorp ManageEngine OpManager=12.4-build124178
Event History
Apr 4, 2020
CVE Published
via MITRE·04:26 PM
Data Sourced
via MITRE·04:26 PM
Description
Frequently Asked Questions
1
What is CVE-2020-11527 vulnerability in Zoho ManageEngine OpManager before 12.4.181?
In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files.
2
How severe is CVE-2020-11527 in Zoho ManageEngine OpManager before 12.4.181?
The severity of CVE-2020-11527 in Zoho ManageEngine OpManager before 12.4.181 is high with a CVSS score of 7.5.
3
Can an unauthenticated remote attacker exploit CVE-2020-11527 in Zoho ManageEngine OpManager before 12.4.181?
Yes, an unauthenticated remote attacker can exploit CVE-2020-11527 in Zoho ManageEngine OpManager before 12.4.181 by sending a specially crafted URI.
4
How can I fix CVE-2020-11527 vulnerability in Zoho ManageEngine OpManager before 12.4.181?
To fix CVE-2020-11527 vulnerability in Zoho ManageEngine OpManager before 12.4.181, update to version 12.4.181 or apply the necessary patches provided by the vendor.