CVE-2014-0344
29.03.2014, 20:55
Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| zohocorp | manageengine_opstor | 𝑥 ≤ 8.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration