CVE-2017-11512

HIGHNuclei

manageengine servicedesk Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2017-11512 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 12, 2022 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

ManageEngine ServiceDesk

Browse Zoho / ManageEngine ServiceDesk
CVE List9.3.9328affected

servicedesk

Browse manageengine / servicedesk
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryHIGHManageEngine ServiceDesk 9.3.9328 - Arbitrary File RetrievalCVSS 7.5

ManageEngine ServiceDesk 9.3.9328 is vulnerable to an arbitrary file retrieval due to improper restrictions of the pathname used in the name parameter for the download-snapshot path. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.

Impact

An attacker can access sensitive files on the server, potentially leading to unauthorized access or data leakage.

Remediation

Upgrade to a patched version of ManageEngine ServiceDesk 9.3.9328 or apply the necessary security patches.

WeaknessesCWE-22
Authors0x_Akoko
Template tagscvecve2017manageenginelfrunauthtenablevkevvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:manageengine:servicedesk:9.3.9328:*:*:*:*:*:*:*
Shodan: http.title:"ManageEngine"
Shodan: http.title:"manageengine"
FOFA: title="manageengine"
Google: intitle:"manageengine"
https://exploit.kitploit.com/2017/11/manageengine-servicedesk-cve-2017-11512.html https://www.tenable.com/security/research/tra-2017-31 https://nvd.nist.gov/vuln/detail/CVE-2017-11512 https://github.com/ARPSyndicate/kenzer-templates https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

3