CVE-2023-38332

Summary

CVE-2023-38332 is a vulnerability affecting Zoho ManageEngine ADManager Plus versions up to 7201. This issue permits authenticated users to gain unauthorized access to another user's account through sensitive information disclosure. By exploiting this vulnerability, an attacker can potentially take over the target account, leading to potential data breaches and unauthorized system changes. This weakness could be used in various attack scenarios, including privilege escalation and account hijacking. Users are recommended to update their ADManager Plus installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.