CVE-2020-14008

{"id": "CVE-2020-14008", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2020-09-04T15:15:10.630", "references": [{"url": "http://packetstormsecurity.com/files/159066/ManageEngine-Applications-Manager-Authenticated-Remote-Code-Execution.html", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://www.manageengine.com", "tags": ["Product", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.manageengine.com/products/applications_manager/issues.html#14730", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution."}, {"lang": "es", "value": "Zoho ManageEngine Applications Manager versiones 14710 y anteriores, permite a un usuario administrador autenticado cargar un jar vulnerable en una ubicaci\u00f3n espec\u00edfica, lo que conlleva a una ejecuci\u00f3n de c\u00f3digo remota"}], "lastModified": "2020-09-16T14:38:54.227", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41E194DC-2587-485A-A790-9B409976F61A", "versionEndIncluding": "13.0"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59E9390D-5DEB-4D0B-B304-84023A1AE9AD"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14000:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03FAC408-84B1-4B51-A6D9-C1DF77FBAA3C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14010:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E00321E8-A1DF-49BF-A4E4-237527E7C75E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14020:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58DA013E-26A7-4968-B89B-4B694D683E3B"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14030:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8552CA6A-B6B5-42D2-97D0-CA9FA5B9DE03"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14040:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87DEE454-FE44-4312-B9FC-53D671ACA37E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14050:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1715F2C6-AC0F-4F46-A6C4-3531242274ED"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14060:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "583248EC-C732-4902-B14C-5031888BD17E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14070:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "355366B0-4D45-4920-A897-A9A4451C072D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14071:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDB9AADD-A93D-46CC-B5E9-BB841FFC2A61"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14072:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDC226FE-DBBA-4FB2-A703-82EE12092FBA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14073:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FC560BE-C297-4348-8739-D014CDEF60CD"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14080:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B385291-37F7-4B1E-98B9-06E42B07ACA9"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14090:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D647A88-0F0A-4971-9AD1-494AB6D1DFF2"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14100:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D25C680-75B3-4285-9DE1-61755DC6CA2F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14110:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50453E27-2E38-4101-9CF4-48DB99C69842"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14120:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D369493-65F3-4655-8049-0CFCEDADE050"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14130:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1F20F68-25EA-46A2-9B5E-6422A6CBF921"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14140:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41A93890-6484-48A0-863F-EDDAE3E73940"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14150:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "905119AD-C900-4A95-827B-C9BD2A3A38F6"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14160:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA55C91C-74B2-4A92-99C3-C30EC29B9CD2"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14170:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1FE4E15-0A4C-4E5A-BE7D-ECB83965164E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14180:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1322B34-8A8B-4796-8574-8A09AF93889F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14190:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C8724F9-C33B-4BD7-8BED-919D211BF35C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14200:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA9199F6-6649-44D4-9A26-C9020A85963D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14210:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92E0BD76-9B86-4268-BC23-65B826AD489A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14220:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67C94A6A-8D0E-4EFB-93B5-5DC2A28B25DD"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14230:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6A3DCE6-328B-453C-97B2-8FA70F113CBB"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14240:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29B3D159-1C80-43E6-B630-F373C8F41A19"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14250:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8EDAA3F-EE45-4888-BA4A-E36F8FD879BC"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14260:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D603BCB2-7A39-4CD3-AE1E-9244DD9D5A48"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14261:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC3AD941-D31B-4760-B9D2-7930E121D2AB"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14262:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A70646ED-342F-47BD-85D7-D43B79BD50EF"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14270:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "423396CC-1B12-4449-B000-C3C554E9800D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14280:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5909613D-013F-4C3B-8204-6BB7A9968A14"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14290:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3423D181-FCA3-4818-8459-4073E73FDEE9"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14300:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FBED0C7-7B28-4AE7-B4B0-EB71F2CB860F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14310:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "195ABF09-6D57-4DCF-B8A6-72AC24A8B29F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14330:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC95E820-FBF3-4CB9-A54C-24198D21197E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14331:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F182989C-7BF6-4DAD-8011-813FDF182251"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14332:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66CD9609-884A-4B9D-A6D2-D23132FE8CB2"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14340:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD7CD16C-B70A-47E1-8DF7-FCCE1316644F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14350:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7581669-97A3-4611-9779-58EF74B50A9E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14360:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "849D811F-9DB7-4E23-8539-0F1CB0981918"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14361:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C439233-2403-40A7-9D87-63C8FD2AE60C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14370:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9853B707-4B58-4787-9779-76523365C774"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14380:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "516685FD-8707-4588-9C1C-CD5EF65B0F23"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14390:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC9198C7-A062-4F33-8B17-2521193FEBCA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14400:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "728DDA8D-A0E2-4086-B4B9-E5BD698D1BCE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14401:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91DA2DFA-1739-4DA7-8814-A99BA30497A4"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14410:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EA1F760-7F12-40CE-A0C9-AE03B2D17949"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14420:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCDCB80D-385C-4CFD-B833-96C525BEF2A9"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14430:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7CD6E6C-1C54-4807-9646-376D53D0FE1E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14440:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9B45558-77F8-41A8-84EA-B9D902A044DE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14450:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC2A1D9B-C55A-401F-B6F4-AEFB36D7732E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14460:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BAAA8B67-C6BF-4517-8867-A4FF16C9F223"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14470:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3A28637-0557-4720-A71B-371AA9CEE002"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14480:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AEA57E7-7CD2-4A1E-9CFD-B89FACFFED78"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14490:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A53FF500-6C40-41F5-8B95-43F71D74DF35"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14500:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B7C7BED-ACF8-4001-93F8-4DCFB452370E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14510:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB52F791-A91E-41C6-811E-E74A19887491"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14520:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82944FCA-6C44-4253-B9C1-47E5C77A8553"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14530:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "811B9D86-B63C-43A0-A671-A1F22BFFFA50"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14531:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "538B5DDE-5088-492C-B8F6-3AA5901694EC"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14532:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D2A4D1F-F59B-4A52-87D6-5EE3B40FB79C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14533:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F61A9B5-58A1-43F5-BB35-66A6F92DC423"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14540:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCAAA0B3-7A12-410A-8B9D-69840E8165D2"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14550:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FCDD28C-6C07-4EA5-82EB-B0B34950E9FD"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14560:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2988A57-57DE-4FA7-B7D0-947E112D3425"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14570:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9DFAB54-8B32-4502-89C7-DDBA04C0D140"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14580:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3D3D6D9-D223-467F-8A42-F0A3FF804915"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14590:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8375AB0F-8478-4738-9CB7-06F50CFF3635"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14600:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72553828-2E9A-4D00-83D4-B03175D6F41A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14610:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2D6E6A8-8011-4B65-8E32-E6F28B2CF8D1"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14620:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2023874-33CA-4545-A8A9-24E97EC8C347"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14630:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4239B72-6CC4-42FC-8B1B-DD6D352FF460"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14660:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9BC2425-4763-4564-A6AA-67CCA369F8CE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14670:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46210773-F4A4-4A45-B121-925F41F60824"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14681:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CE6B9FB-9EB3-4299-A68A-CB8B526F8EB7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14682:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB440A39-D56A-4006-BD5C-841B743206DB"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14683:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAAB6627-826F-4533-BBA9-B66363DA6114"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14684:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D533490F-0026-48B9-83B1-71ECC9343F93"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14685:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FED82DD4-A755-4133-878A-B481EBFBCBC7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14690:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCB56836-19C3-468E-B55F-A2A6E791A1CD"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14700:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "076BBC38-865B-458A-9ECF-EE705CA180DB"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14710:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D81984A-E164-4E37-9895-29088EA2F1AC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}