CVE-2023-29505

Summary

CVE-2023-29505 is a newly identified vulnerability affecting Zoho ManageEngine Network Configuration Manager version 12.6.165. This issue allows for cross-site WebSocket hijacking, enabling an attacker to intercept and manipulate WebSocket communications between the user's browser and the affected server. By exploiting this vulnerability, an attacker can gain unauthorized access to sensitive information or even take control of the user's session. Organizations running the impacted version of Network Configuration Manager are advised to apply the necessary patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.