4.2
CVE-2024-36036
- EPSS 0.37%
- Veröffentlicht 27.05.2024 18:15:10
- Zuletzt bearbeitet 16.05.2025 16:58:26
- Erkennungen
Insufficient Access Control Vulnerability
Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Adaudit Plus Version < 7.2
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7200
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7201
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7202
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7203
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7210
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7211
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7212
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7213
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7215
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7220
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7250
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7251
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7260
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.29 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.2 | 1.1 | 2.7 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
|
| 0fc0942c-577d-436f-ae8e-945763c79b02 | 4.2 | 1.1 | 2.7 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://www.manageengine.com/products/active-directory-audit/cve-2024-36036.html