CVE-2019-8394 Zoho ManageEngine ServiceDesk Plus (SDP) File Upload
Remote attackers can upload arbitrary files via login page customization in Zoho ManageEngine ServiceDesk Plus, potentially leading to code execution.
- Exploited in the wild
- Since 3 Nov 2021
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-8394?
CVE-2019-8394 is a high-severity vulnerability in Zohocorp Manageengine Servicedesk Plus, published on 17 Feb 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.
Weakness: CWE-434
Which versions are affected by CVE-2019-8394?
It affects 1 product.
Products include Zohocorp Manageengine Servicedesk Plus.
How do I fix CVE-2019-8394?
No fix has been published for CVE-2019-8394 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 3 May 2022.
Is CVE-2019-8394 being exploited?
Yes. Attackers have exploited CVE-2019-8394 in the wild since at least 3 Nov 2021.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in Zohocorp Manageengine Servicedesk Plus
Sources
Also known as GHSA-grv7-685f-m26h.