Authorization Flaw in Zohocorp ManageEngine Applications Manager

CVE-2024-41140

What is CVE-2024-41140?

Zohocorp's ManageEngine Applications Manager versions 174000 and earlier exhibit a vulnerability due to improper authorization in the update user function. This flaw could potentially allow unauthorized users to perform actions that should be restricted, which could lead to unauthorized access or modification of user accounts. It is crucial for organizations using affected versions to apply security updates to mitigate potential risks associated with this vulnerability.

References