Lucene search

0fc0942c-577d-436f-ae8e-945763c79b02NVD:CVE-2024-38868

HistoryAug 30, 2024 - 6:15 p.m.

CVE-2024-38868

2024-08-3018:15:06

CWE-863

0fc0942c-577d-436f-ae8e-945763c79b02

web.nvd.nist.gov

zohocorp

manageengine

endpoint central

authorization

vulnerability

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

EPSS

0.003

Percentile

71.5%

JSON

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15

Affected configurations

Nvd

Node

zohocorpmanageengine_endpoint_centralRange<11.3.2400.15

zohocorpmanageengine_endpoint_centralRange11.3.2401.05–11.3.2406.08

VendorProductVersionCPE
zohocorpmanageengine_endpoint_central*cpe:2.3:a:zohocorp:manageengine_endpoint_central:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zohocorp	manageengine_endpoint_central	*	cpe:2.3:a:zohocorp:manageengine_endpoint_central::::::::

References

www.manageengine.com/products/desktop-central/security-updates-ngav.html

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

EPSS

0.003

Percentile

71.5%

JSON

Related for NVD:CVE-2024-38868