4.2
CVE-2024-36036
- EPSS 0.37%
- Veröffentlicht 27.05.2024 18:15:10
- Zuletzt bearbeitet 16.05.2025 16:58:26
- Quelle 0fc0942c-577d-436f-ae8e-945763
- CVE-Watchlists
- Unerledigt
Insufficient Access Control Vulnerability
Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Adaudit Plus Version < 7.2
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7200
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7201
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7202
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7203
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7210
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7211
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7212
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7213
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7215
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7220
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7250
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7251
Zohocorp ≫ Manageengine Adaudit Plus Version7.2 Update7260
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.29 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.2 | 1.1 | 2.7 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
|
| 0fc0942c-577d-436f-ae8e-945763c79b02 | 4.2 | 1.1 | 2.7 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://www.manageengine.com/products/active-directory-audit/cve-2024-36036.html