.. / CVE-2020-12116

Exploit for Zoho ManageEngine OpManger - Arbitrary File Read (CVE-2020-12116)

Description:

Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a specially crafted request.

Nuclei Template

View the template here CVE-2020-12116.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-12116.yaml
Copy

References:

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125
https://www.manageengine.com/network-monitoring/help/read-me-complete.html
https://github.com/ARPSyndicate/kenzer-templates
https://github.com/BeetleChunks/CVE-2020-12116
https://nvd.nist.gov/vuln/detail/CVE-2020-12116