An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access the configuration file of the mail server (except for the password).
References
Link | Resource |
---|---|
https://excellium-services.com/cert-xlm-advisory/cve-2019-17112/ | Third Party Advisory |
https://www.manageengine.com/data-security/release-notes.html | Release Notes Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-10-09T19:40:52
Updated: 2019-10-09T19:40:52
Reserved: 2019-10-03T00:00:00
Link: CVE-2019-17112
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-10-09T20:15:23.690
Modified: 2019-11-20T21:05:16.433
Link: CVE-2019-17112
JSON object: View
Redhat Information
No data.
CWE