Zohocorp ManageEngine Analytics Plus Vulnerable to Authenticated Sensitive Data Exposure

CVE-2024-52323

Summary

ManageEngine Analytics Plus versions prior to 6100 exhibit a vulnerability due to authenticated sensitive data exposure. This flaw allows authenticated users to access critical sensitive tokens that are associated with the organization’s administrative accounts. Such an exposure can lead to unauthorized access and potentially compromise the integrity and confidentiality of organizational data. Organizations utilizing affected versions are advised to apply necessary updates and review their security practices to mitigate the risk associated with this vulnerability.

References