ManageEngine.Multiple.Products.Directory.Traversal

Description

This indicates an attack attempt against an Directory Traversal vulnerability in Multiple ManageEngine products.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application when handling HTTP requests. It allows a remote attacker to upload an arbitrary file onto vulnerable systems.

Affected Products

ManageEngine OpManager 8 (build 88xx) through 11.4
ManageEngine IT360 10.3 and 10.4
ManageEngine Social IT Plus 11.0

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://support.zoho.com/portal/manageengine/helpcenter/articles/fix-for-remote-code-execution-via-file-upload-vulnerability

References