PT-2020-12668 · Zoho · Zoho Manageengine Datasecurity Plus

Sahil Dhar · Published 2020-05-08 · Updated 2022-10-13 · CVE-2020-11531

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine DataSecurity Plus versions prior to 6.0.1

Description The issue arises from the lack of validation of the database schema name when handling a DR-SCHEMA-SYNC request in the DataEngine Xnode Server application. This allows an authenticated attacker to execute code in the context of the product by writing a JSP file to the webroot directory via directory traversal.

Recommendations For versions prior to 6.0.1, update to version 6.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the DR-SCHEMA-SYNC request handler to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-11531

Affected Products

Zoho Manageengine Datasecurity Plus

References · 8

• 🔥 http://seclists.org/fulldisclosure/2020/May/27 · Exploit
• 🔥 http://packetstormsecurity.com/files/157604/ManageEngine-DataSecurity-Plus-Path-Traversal-Code-Execution.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-11531 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11531 · Security Note
• https://t.me/cybersecuritytechnologies/1094 · Telegram Post
• https://pitstop.manageengine.com/portal/community/topic/upgrade-datasecurity-plus-to-the-build-6013-to-fix-security-issues · Note
• https://t.me/cybersecuritytechnologies/6968 · Telegram Post
• https://t.me/cvenotify/3687 · Telegram Post