Описание
ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 11.4.2528.05 (исключая)
cpe:2.3:a:zohocorp:manageengine_endpoint_central:*:*:*:*:*:*:*:*
EPSS
Процентиль: 41%
0.00189
Низкий
3.2 Low
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-532
Связанные уязвимости
CVSS3: 3.2
github
3 месяца назад
ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.
EPSS
Процентиль: 41%
0.00189
Низкий
3.2 Low
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-532