5.3

CVE-2019-19800

Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update -
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14000
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14010
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14020
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14030
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14040
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14050
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14060
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14070
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14071
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14072
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14073
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14080
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14090
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14100
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14110
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14120
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14130
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14140
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14150
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14160
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14170
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14180
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14190
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14200
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14210
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14220
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14230
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14240
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14250
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14260
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14261
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14262
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14270
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14280
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14290
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14300
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14310
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14330
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14331
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14332
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14340
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14350
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14360
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14361
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14370
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14380
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14390
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14400
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14401
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14410
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14420
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14430
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14440
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14450
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14460
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14470
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14480
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14490
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14500
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14510
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.89% 0.889
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://www.manageengine.com/products/applications_manager/release-notes.html
Release Notes
https://gitlab.com/eLeN3Re/CVE-2019-19800/
Third Party Advisory
https://www.manageengine.com
Product