5.5

CVE-2024-36037

Insufficient Access Control Vulnerability

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7200
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7201
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7202
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7203
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7210
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7211
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7212
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7213
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7215
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7220
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7250
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7251
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7260
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.362
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0fc0942c-577d-436f-ae8e-945763c79b02 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://www.manageengine.com/products/active-directory-audit/cve-2024-36037.html
Vendor Advisory