Design/Logic Flaw

2022-08-1020:16:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user’s API key, and then access external APIs.

CPENameOperatorVersion
manageengine_firewall_analyzereq12.5 build125664
manageengine_firewall_analyzereq12.6 build126113
manageengine_firewall_analyzereq12.6 build126114
manageengine_firewall_analyzereq12.6 build126115
manageengine_firewall_analyzereq12.6 build126116
manageengine_firewall_analyzereq12.6 build126117
manageengine_firewall_analyzereq12.6 build126100
manageengine_firewall_analyzereq12.6 build126101
manageengine_firewall_analyzereq12.6 build126102
manageengine_firewall_analyzereq12.6 build126103

Name	Operator	Version
manageengine_firewall_analyzer	eq	12.5 build125664
manageengine_firewall_analyzer	eq	12.6 build126113
manageengine_firewall_analyzer	eq	12.6 build126114
manageengine_firewall_analyzer	eq	12.6 build126115
manageengine_firewall_analyzer	eq	12.6 build126116
manageengine_firewall_analyzer	eq	12.6 build126117
manageengine_firewall_analyzer	eq	12.6 build126100
manageengine_firewall_analyzer	eq	12.6 build126101
manageengine_firewall_analyzer	eq	12.6 build126102
manageengine_firewall_analyzer	eq	12.6 build126103