PT-2019-18445
CVE-2019-7162
·
Publicado
2019-12-31
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
9.1
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine ADSelfService Plus version 5.6 Build 5607
Description
An issue was discovered that allows an unauthenticated person to retrieve internal information from the system and modify the product installation due to an exposed service.
Recommendations
For Zoho ManageEngine ADSelfService Plus version 5.6 Build 5607, consider restricting access to the exposed service as a temporary workaround until a patch is available.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾