Description
Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zohocorp | Log360 | < 13071 | 13071 |
| Zohocorp | EventLog Analyzer | < 13071 | 13071 |