Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed.
References
| Link | Resource |
|---|---|
| https://manageengine.com | Product |
| https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-39912.html | Vendor Advisory |
Configurations
History
01 Jan 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed. |
06 Sep 2023, 20:24
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
| References | (MISC) https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-39912.html - Vendor Advisory | |
| References | (MISC) https://manageengine.com - Product | |
| CPE | cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:* | |
| First Time |
Zohocorp manageengine Admanager Plus
Zohocorp |
|
| CWE | CWE-22 |
31 Aug 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-31 23:15
Updated : 2024-01-01 06:15
NVD link : CVE-2023-39912
Mitre link : CVE-2023-39912
CVE.ORG link : CVE-2023-39912
JSON object : View
Products Affected
zohocorp
- manageengine_admanager_plus
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')