Intrusion PreventionManageEngine.OpManager.OpmSkipFilter.Directory.Traversal
Description
This indicates an attack attempt to exploit a Directory Traversal Vulnerability in In Zoho ManageEngine OpManager.
The vulnerability is due to insufficient sanitizing of user supplied inputs. An unauthenticated remote attacker may be able to exploit this to read arbitrary files on the target server under the security context of the system.
Affected Products
Zoho ManageEngine OpManager before 125144
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.manageengine.com/network-monitoring/download.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-08-09 | 25.618 | Name:Zoho. ManageEngine. OpManager. OpmSkipFilter. Directory. Traversal:ManageEngine. OpManager. OpmSkipFilter. Directory. Traversal |
| 2022-09-19 | 22.396 | Default_action:pass:drop |
| 2022-09-07 | 22.387 |
| ID | 52049 |
| Created | Aug 29, 2022 |
| Updated | Aug 21, 2023 |
| Risk |
|
| CVE ID | CVE-2020-13818 |
| Exploit Prediction Score | 21.08% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |