Privilege Escalation Vulnerability in ADManager Plus

CVE-2024-24409

What is CVE-2024-24409?

ManageEngine ADManager Plus, a product by ZohoCorp, is susceptible to a privilege escalation vulnerability that affects versions 7203 and earlier. This vulnerability is found within the 'Modify Computers' option, potentially allowing unauthorized users to escalate their privileges beyond intended access levels. Organizations utilizing this product should take precautionary measures to assess their current version and apply necessary updates to mitigate security risks.

References