PT-2026-95229 · Manageengine · Datasecurity Plus
CVSS v3.1
7.5
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
ManageEngine DataSecurity Plus versions prior to 6310
Description
An agent authentication bypass exists that allows unenrolled agents to send requests without proper authentication.
Recommendations
Update ManageEngine DataSecurity Plus to version 6310 or later.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Datasecurity Plus