PT-2024-19059
CVE-2024-21791
·
Published
2024-05-22
·
Updated
2024-07-03
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine ADAudit Plus versions below 7271
Description
The issue allows SQL Injection in the lockout history option. Note that non-admin users cannot exploit this vulnerability.
Recommendations
For versions below 7271, update to version 7271 or later to resolve the issue. As a temporary workaround, consider restricting access to the lockout history option to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾