PT-2023-26367 · Zoho · Zoho Manageengine Admanager Plus

Dalt4Sec · Publicado 2023-08-04 · Atualizado 2023-08-09 · CVE-2023-38332

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions through 7201

Description The issue allows authenticated users to take over another user's account via sensitive information disclosure. This can potentially lead to unauthorized access and control of user accounts.

Recommendations For versions through 7201, update to a version that contains a fix for this issue to prevent sensitive information disclosure and unauthorized account takeovers.

Correção

Identificadores relacionados

CVE-2023-38332

Produtos afetados

Zoho Manageengine Admanager Plus

Referências · 5

• https://manageengine.com/products/ad-manager/admanager-kb/cve-2023-38332.html · Aviso do Fabricante
• https://manageengine.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-38332 · Nota de Segurança
• https://t.me/cibsecurity/67791 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-38332 · Aviso do Fabricante