NetSight
IP …
critical9.8

CVE-2020-21642

Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run …

Impact

Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code.

Affected products

VendorProductAffected versions
ZohocorpManageengine Analytics Plus
Versions 2.9, 3.0, 3.1, 3.2, 3.3, 3.4

Weakness classification

CWE-22

References