Lucene search

ManageEngineCVELIST:CVE-2024-38868

HistoryAug 30, 2024 - 5:44 p.m.

CVE-2024-38868 Incorrect Authorization

2024-08-3017:44:38

CWE-863

ManageEngine

www.cve.org

zohocorp

manageengine

endpoint central

cve-2024-38868

incorrect authorization

vulnerability

isolating devices

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

EPSS

0.003

Percentile

71.5%

JSON

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15

CNA Affected

[
  {
    "collectionURL": "https://www.manageengine.com/?pos=EndpointCentral",
    "defaultStatus": "unaffected",
    "product": "Endpoint Central",
    "vendor": "ManageEngine",
    "versions": [
      {
        "lessThan": "11.3.2406.08",
        "status": "affected",
        "version": "0",
        "versionType": "11.3.2416.04"
      },
      {
        "lessThan": "11.3.2400.15",
        "status": "affected",
        "version": "0",
        "versionType": "11.3.2400.25"
      }
    ]
  }
]

References

www.manageengine.com/products/desktop-central/security-updates-ngav.html