HTTP: ZoHo ManageEngine ServiceDesk Plus Arbitrary File Upload

This signature detects attempts to exploit a known vulnerability against ZoHo ManageEngine ServiceDesk Plus. A successful attack can lead to arbitrary code execution.

Extended Description

Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.

Affected Products

Zohocorp manageengine_servicedesk_plus

References

BugTraq: 107129

CVE: CVE-2019-8394

Short Name
HTTP:CTS:ZOHO-SDPLUS-ARB-FILE
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Arbitrary CVE-2019-8394 File ManageEngine Plus ServiceDesk Upload ZoHo bid:107129
Release Date
12/11/2020
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3337
False Positive
Unknown
Vendors

Zohocorp

CVSS Score

4.0

Found a potential security threat?