CVE-2020-11946
Published Apr 20, 2020
Last updated 2 years ago
Overview
- Description
- Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-306
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125000:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94F878CC-E691-41E9-A90D-72EA25038963"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D1EA156-BD95-4AAA-B688-0CD62CCDB60A"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125100:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8033E51C-D261-4A12-96CD-AE1F13BFD2AE"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125101:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EE1E1E6-ED1C-443A-A576-AD47D65082B1"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125102:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E283214-CE6A-4CD6-9E9B-7BF09C37447D"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125108:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FF84A5E-C43B-4637-B725-1087D2057EED"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125110:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25AEF257-E1C1-4DFD-9EC0-9B2AC3920CCD"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125111:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46E32091-F91D-4706-A4F9-DC658CF36A6D"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125112:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC7D1106-6708-4A84-A077-286376C72AB7"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125113:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "071B3368-D7C2-4EE1-808F-1F4A3C3A4756"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125114:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E9D5882-91D6-4E9D-AD8B-F3861D987826"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125116:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17931D40-369C-430F-B5ED-FAF69FAA0E3F"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125117:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02B4D022-BC43-4041-BA2B-60A6D42AD150"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125118:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15FFD3F7-CB9F-4FB1-9F2C-CFDAE7E46FF4"
}
],
"operator": "OR"
}
]
}
]