An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for the password. For example, if the username is admin, the password is admin@opm.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-08-16T02:44:19
Updated: 2019-08-27T21:06:58
Reserved: 2019-08-15T00:00:00
Link: CVE-2019-15106
JSON object: View
NVD Information
Status : Modified
Published: 2019-08-16T03:15:11.327
Modified: 2020-08-24T17:37:01.140
Link: CVE-2019-15106
JSON object: View
Redhat Information
No data.
CWE