RULE(RULE ID:330413)

Rule General Information
Release Date: 2020-06-16
Rule Name: Zoho ManageEngine OpManager cachestart Directory Traversal Vulnerability (CVE-2020-13818)
Severity:
CVE ID:
Rule Protection Details
Description: In Zoho ManageEngine OpManager before 125144, when is used, directory traversal validation can be bypassed.
Impact: An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information.
Affected OS: Windows
Reference: https://www.manageengine.com/network-monitoring/help/read-me-complete.html
ZeroDayInitiative:ZDI-20-691
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.manageengine.com/network-monitoring/help/read-me-complete.html