CVE-2019-20474

An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role (read-only access) to use and abuse it. One of the abuses allows performing network and port scan operations of the localhost or the hosts on the same network segment, aka SSRF.

CVSS v3 4.3 MEDIUM
CVSS v2.0 4.0 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://excellium-services.com/cert-xlm-advisory/cve-2019-20474/	Third Party Advisory
https://www.manageengine.com/remote-desktop-management/knowledge-base/authorization-failure.html	Vendor Advisory
https://excellium-services.com/cert-xlm-advisory/cve-2019-20474/	Third Party Advisory
https://www.manageengine.com/remote-desktop-management/knowledge-base/authorization-failure.html	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:zohocorp:manageengine_remote_access_plus:10.0.447:*:*:*:*:*:*:*

History

21 Nov 2024, 04:38

Type	Values Removed	Values Added
References	~~() https://excellium-services.com/cert-xlm-advisory/cve-2019-20474/ - Third Party Advisory~~	() https://excellium-services.com/cert-xlm-advisory/cve-2019-20474/ - Third Party Advisory
References	~~() https://www.manageengine.com/remote-desktop-management/knowledge-base/authorization-failure.html - Vendor Advisory~~	() https://www.manageengine.com/remote-desktop-management/knowledge-base/authorization-failure.html - Vendor Advisory

Information

Published : 2020-02-17 19:15

Updated : 2024-11-21 04:38

NVD link : CVE-2019-20474

Mitre link : CVE-2019-20474

CVE.ORG link : CVE-2019-20474

JSON object : View

Products Affected

zohocorp

manageengine_remote_access_plus

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2019-20474", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2020-02-17T19:15:12.260", "references": [{"url": "https://excellium-services.com/cert-xlm-advisory/cve-2019-20474/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.manageengine.com/remote-desktop-management/knowledge-base/authorization-failure.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://excellium-services.com/cert-xlm-advisory/cve-2019-20474/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.manageengine.com/remote-desktop-management/knowledge-base/authorization-failure.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role (read-only access) to use and abuse it. One of the abuses allows performing network and port scan operations of the localhost or the hosts on the same network segment, aka SSRF."}, {"lang": "es", "value": "Se detect\u00f3 un problema en Zoho ManageEngine Remote Access Plus versi\u00f3n 10.0.447. El servicio para probar la configuraci\u00f3n del servidor de correo sufre un problema de autorizaci\u00f3n permitiendo que un usuario con el rol Guest (acceso de solo lectura) lo use y abuse. Uno de los abusos permite llevar a cabo operaciones de escaneo de red y puertos del host local o los hosts en el mismo segmento de red, tambi\u00e9n se conoce como una vulnerabilidad de tipo SSRF."}], "lastModified": "2024-11-21T04:38:34.440", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_remote_access_plus:10.0.447:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B19E33DD-C02A-4CAC-B7E0-C2506771411A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}