CVEvulnerability

CVE-2023-38332

6.5 MEDIUM Published 2023-08-04 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2023-08-04
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure.

Affected configurations

• zohocorp manageengine admanager plus (< 7.2) • zohocorp manageengine admanager plus 7.2

References

https://manageengine.com Product
https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-38332.html Vendor Advisory
https://manageengine.com Product
https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-38332.html Vendor Advisory