Path Traversal Vulnerability in Zoho ManageEngine ADAudit Plus
CVE-2023-50785

2.7LOW

Key Information:

Vendor

Zohocorp
Status
Manageengine Adaudit Plus
Vendor
CVE Published:
25 January 2024

What is CVE-2023-50785?

A path traversal vulnerability exists in Zoho ManageEngine ADAudit Plus versions prior to 7270, allowing admin users to exploit this flaw to navigate and view names of arbitrary directories. This presents a significant risk as it can lead to unauthorized access to sensitive directory information, potentially exposing critical data within the system.

References

https://www.manageengine.com/products/active-directory-au...

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.