PT-2024-19059 · Zoho · Zoho Manageengine Adaudit Plus
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine ADAudit Plus versions below 7271
Description
The issue allows SQL Injection in the lockout history option. Note that non-admin users cannot exploit this vulnerability.
Recommendations
For versions below 7271, update to version 7271 or later to resolve the issue. As a temporary workaround, consider restricting access to the lockout history option to minimize the risk of exploitation.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Zoho Manageengine Adaudit Plus