CVE-2024-5527

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8110

Description: The issue is related to the file auditing configuration, where the lack of protection of the SQL query structure allows for authenticated SQL injection. This can enable a remote attacker to execute custom queries and gain access to database table records.

Recommendations: For versions below 8110, update to a version 8110 or later to resolve the authenticated SQL injection issue in the file auditing configuration. As a temporary workaround, consider restricting access to the file auditing configuration to minimize the risk of exploitation.