Description
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to modify Change Management report schedule configurations for firewalls outside their assigned scope.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zohocorp | ManageEngine OpManager | < 12.8.711 | 12.8.711 |
| Zohocorp | ManageEngine Firewall Analyzer | < 12.8.711 | 12.8.711 |