Lucene search

K
zdiAnonymousZDI-22-1122
HistoryAug 18, 2022 - 12:00 a.m.

ManageEngine OpManager Plus getUserAPIKey Authentication Bypass Vulnerability

2022-08-1800:00:00
Anonymous
www.zerodayinitiative.com
24

0.004 Low

EPSS

Percentile

72.2%

This vulnerability allows remote attackers to bypass authentication on affected installations of ManageEngine OpManager Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getUserAPIKey function. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system.

0.004 Low

EPSS

Percentile

72.2%

Related for ZDI-22-1122