PT-2023-25314 · Zoho · Zoho Manageengine Admanager Plus

R00T4Dm · Publicado 2023-07-05 · Atualizado 2023-07-10 · CVE-2023-35786

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7183

Description The issue allows admin users to exploit an XXE problem to view files.

Recommendations For versions prior to 7183, update to version 7183 or later to resolve the issue.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2023-35786

Produtos afetados

Zoho Manageengine Admanager Plus

Referências · 4

• https://manageengine.com/products/ad-manager/admanager-kb/cve-2023-35786.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-35786 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-35786 · Nota de Segurança
• https://t.me/cibsecurity/65950 · Publicação no Telegram