ZOHO ManageEngine Log360 code issue vulnerability

ZzOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.A code issue vulnerability exists in ZOHO ManageEngine Log360, which stems from the product allowing system paths to be overwritten via BCP files. An attacker could remotely execute code through this vulnerability.