Zohocorp ADAudit Plus Vulnerable to SQL Injection in Technician Reports

CVE-2024-5608

Summary

ManageEngine ADAudit Plus, developed by Zohocorp, is susceptible to a SQL Injection vulnerability located within its technician reports feature. This flaw permits attackers to manipulate SQL queries by injecting malicious code, potentially leading to unauthorized access to sensitive data, data corruption, and overall system disruption. Users with versions below 8121 should prioritize upgrades to mitigate risks associated with this vulnerability and ensure the integrity of their auditing processes.

References