Lucene search

K
zdiAnonymousZDI-22-1119
HistoryAug 18, 2022 - 12:00 a.m.

ManageEngine Network Configuration Manager getUserAPIKey Authentication Bypass Vulnerability

2022-08-1800:00:00
Anonymous
www.zerodayinitiative.com
10

0.004 Low

EPSS

Percentile

72.2%

This vulnerability allows remote attackers to bypass authentication on affected installations of ManageEngine Network Configuration Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getUserAPIKey function. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system.

0.004 Low

EPSS

Percentile

72.2%

Related for ZDI-22-1119