Zoho ManageEngine Desktop Central 9.1.0 HTTP Response InvSWMetering.csv fileName crlf injection

Summaryinfo

A vulnerability was found in Zoho ManageEngine Desktop Central 9.1.0. It has been classified as problematic. This vulnerability affects unknown code of the file /STATE_ID/1613157927228/InvSWMetering.csv of the component HTTP Response Handler. The manipulation of the argument fileName leads to crlf injection. This vulnerability is referenced as CVE-2023-4767. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in Zoho ManageEngine Desktop Central 9.1.0 (Endpoint Management Software) and classified as problematic. This issue affects an unknown code block of the file /STATE_ID/1613157927228/InvSWMetering.csv of the component HTTP Response Handler. The manipulation of the argument fileName with an unknown input leads to a crlf injection vulnerability. Using CWE to declare the problem leads to CWE-93. The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs. Impacted is integrity. The summary by CVE is:

A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.csv.

The weakness was published 11/03/2023 by Rafael Pedrero. The advisory is shared at incibe.es. The identification of this vulnerability is CVE-2023-4767 since 09/05/2023. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 11/03/2023).

By approaching the search of inurl:STATE_ID/1613157927228/InvSWMetering.csv it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Endpoint Management Software

Vendor

• Zoho ManageEngine

Name

• Desktop Central

Version

• 9.1.0

License

• commercial

Website

• Vendor: https://www.manageengine.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion