8.8

CVE-2024-24409

Privilege Escalation

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update -
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6100
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6101
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6102
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6103
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6104
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6105
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6106
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6107
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6108
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6109
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6110
Zohocorp ≫ Manageengine Admanager Plus Version 6.1 Update 6111
Zohocorp ≫ Manageengine Admanager Plus Version 6.6 Update 6657
Zohocorp ≫ Manageengine Admanager Plus Version 6.6 Update 6660
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update -
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7000
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7010
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7011
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7020
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7030
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7040
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7041
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7050
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7051
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7052
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7053
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7054
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7055
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7056
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7060
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7061
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7062
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7063
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7064
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7065
Zohocorp ≫ Manageengine Admanager Plus Version 7.0 Update 7066
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update -
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7100
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7101
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7102
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7110
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7111
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7112
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7113
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7114
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7115
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7116
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7117
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7118
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7120
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7121
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7122
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7123
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7124
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7125
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7126
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7130
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7131
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7140
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7141
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7150
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7151
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7160
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7161
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7162
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7163
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7170
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7171
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7180
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7181
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7182
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7183
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7184
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7185
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7186
Zohocorp ≫ Manageengine Admanager Plus Version 7.1 Update 7188
Zohocorp ≫ Manageengine Admanager Plus Version 7.2 Update 7200
Zohocorp ≫ Manageengine Admanager Plus Version 7.2 Update 7201
Zohocorp ≫ Manageengine Admanager Plus Version 7.2 Update 7202
Zohocorp ≫ Manageengine Admanager Plus Version 7.2 Update 7203
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.81% 0.912
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0fc0942c-577d-436f-ae8e-945763c79b02 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2024-24409.html
Vendor Advisory