CVE-2020-24786 Explained : Impact and Mitigation

An issue was discovered in Zoho ManageEngine Exchange Reporter Plus, AD360, ADSelfService Plus, DataSecurity Plus, RecoverManager Plus, EventLog Analyzer, ADAudit Plus, O365 Manager Plus, Cloud Security Plus, ADManager Plus, and Log360. The vulnerability allows an authentication bypass in the Java servlet, potentially leading to a full ManageEngine suite compromise.

Understanding CVE-2020-24786

This CVE identifies a critical security vulnerability affecting multiple ManageEngine products.

What is CVE-2020-24786?

The vulnerability in the Java servlet com.manageengine.ads.fw.servlet.UpdateProductDetails allows unauthorized access, enabling attackers to modify system integration properties and potentially compromise the entire ManageEngine suite.

The Impact of CVE-2020-24786

The authentication bypass vulnerability poses a significant risk as it could lead to unauthorized access and manipulation of system integration properties, potentially resulting in a complete compromise of the ManageEngine suite.

Technical Details of CVE-2020-24786

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The vulnerability in the Java servlet com.manageengine.ads.fw.servlet.UpdateProductDetails allows for an authentication bypass, enabling unauthorized access to system integration properties.

Affected Systems and Versions

Zoho ManageEngine Exchange Reporter Plus before build number 5510
AD360 before build number 4228
ADSelfService Plus before build number 5817
DataSecurity Plus before build number 6033
RecoverManager Plus before build number 6017
EventLog Analyzer before build number 12136
ADAudit Plus before build number 6052
O365 Manager Plus before build number 4334
Cloud Security Plus before build number 4110
ADManager Plus before build number 7055
Log360 before build number 5166

Exploitation Mechanism

The vulnerability can be exploited by sending specially crafted requests to the vulnerable Java servlet, allowing attackers to bypass authentication and gain unauthorized access to system integration properties.

Mitigation and Prevention

Protect your systems from CVE-2020-24786 with the following steps:

Immediate Steps to Take

Apply security patches provided by ManageEngine for the affected products.
Monitor system logs for any suspicious activities indicating unauthorized access.

Long-Term Security Practices

Regularly update and patch all software to prevent known vulnerabilities.
Implement strong access controls and authentication mechanisms to restrict unauthorized access.

Patching and Updates

Stay informed about security updates and patches released by ManageEngine for the affected products.
Ensure timely application of patches to mitigate the risk of exploitation.