CVE-2020-13818 : In Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directo

In Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal validation can be bypassed.

Published 2020-06-04 13:15:11

Updated 2021-06-22 17:29:28

Source MITRE

View at NVD, CVE.org

Vulnerability category: Directory traversal

Products affected by CVE-2020-13818

Zohocorp » Manageengine Opmanager
Versions before (<) 12.5
cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:-:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125000
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125000:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125002
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125002:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125100
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125100:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125101
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125101:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125102
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125102:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125108
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125108:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125110
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125110:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125111
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125111:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125112
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125112:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125113
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125113:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125114
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125114:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125116
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125116:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125117
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125117:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125118
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125118:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125120
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125120:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125121
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125121:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125123
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125123:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125124
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125124:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125125
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125125:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125136
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125136:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125137
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125137:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125139
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125139:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125140
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125140:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.5 Update Build125143
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125143:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-13818

EPSS FAQ

76.57%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-13818

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2020-13818

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-13818

https://www.zerodayinitiative.com/advisories/ZDI-20-691/

ZDI-20-691 | Zero Day Initiative
https://www.manageengine.com/network-monitoring/help/read-me-complete.html

Read me | OpManager Help
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2020-13818

Products affected by CVE-2020-13818

Exploit prediction scoring system (EPSS) score for CVE-2020-13818

CVSS scores for CVE-2020-13818

CWE ids for CVE-2020-13818

References for CVE-2020-13818