Skip to content
OpenAdvisories
Medium WID-SEC-2023-2932 1 CVE

Zoho ManageEngine Endpoint Central und Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht Offenlegung von Informationen

Published Nov 15, 2023 · Updated Nov 15, 2023 · de-DE

Vendor: Zoho Product: ManageEngine Endpoint Central < 11.2.2322.01 Product: ManageEngine ServiceDesk Plus < 14304 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Zoho ManageEngine Endpoint Central und Zoho ManageEngine ServiceDesk Plus ausnutzen, um Informationen offenzulegen.

Product

ManageEngine Endpoint Central ist eine Desktop- und Mobile-Device-Management-Software.
ManageEngine ServiceDesk Plus ist eine Helpdesk- und Asset-Management-Software.

Vulnerabilities 1

  • Medium 5.5
    CVE-2023-6105

    ManageEngine Information Disclosure in Multiple Products

    An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the expose…

    ManageEngine Asset Explorer Service Desk Plus Access Manager Plus

Revision history

  1. #1

    Initiale Fassung

References