Skip to content
OpenAdvisories
High · 7.5 CVE-2023-41344 EUVD-2023-45847GHSA-98j8-h3f2-2j89

NCSIST ManageEngine MDM - Path Traversal

Published Nov 3, 2023 · Updated Sep 5, 2024 · Assigned by twcert

Description

NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files.

Affected products

VendorProductAffectedFixed
NCSIST ManageEngine MDM V1.4 2021/09/14 —

References