4 matches found
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 is affected by a privilege-escalation flaw in the ChangeAmazonPasswordServlet. An authenticated, low-privilege user can change other users’ passwords, potentially compromising higher-privilege accounts. The vulnerability is documented across m...