Outbreak Alert: Zoho ManageEngine RCE Vulnerability

This article describes multiple Zoho ManageEngine on-premise products vulnerability detection with FortiDevSec.

Products such as ServiceDesk Plus, Password Manager Pro and ADSelfService Plus have been found to be affected by CVE-2022-47966.

Successful exploitation of an outdated third party dependency Apache Santuario could lead to remote code execution.

Detection against these vulnerabilities is empowered by the FortiDevSec Software Composition Analysis (SCA) scanner.

This technology enables FortiDevSec to assess with a high level of confidence if the application codebase is vulnerable to a specific vulnerability by identifying open-source software dependencies.

The SCA scanner is enabled by default. Once the scan is performed on an application, the result appears under the Software Composition Analysis tab.

A step-by-step guide on how to scan an application is available in the user guide.