PT-2025-5696 · Zoho · Manageengine Endpoint Central
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
ManageEngine Endpoint Central versions before 11.3.2440.09
Description:
The issue allows an attacker to change the username in the chat due to an IDOR vulnerability.
Recommendations:
For ManageEngine Endpoint Central versions before 11.3.2440.09, update to version 11.3.2440.09 or later to resolve the issue.
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Manageengine Endpoint Central