CVE-2023-50785

CVSS 3.1 Score 2.7 of 10 (low)

Details

Published Jan 25, 2024
Updated: Jan 31, 2024
CWE ID 22

Summary

CVE-2023-50785 is a vulnerability found in Zoho ManageEngine ADAudit Plus before version 7270. It allows admin users to view the names of arbitrary directories through path traversal. The affected products include uWRJWv, uWRJWu, snLzMO, snLzMP, t0YY5F, snLzMQ, tnKfea, tnKfeb, tnKfeY, tnKfeZ, tnKfee, tnKfec, and tnKfed. The vulnerability has a base severity rating of LOW and a base score of 2.7 according to NVD@nist.gov. The potential danger it poses to an organization is relatively low as it requires high privileges and no user interaction. However, it can lead to a compromise of confidentiality as an attacker can gain unauthorized access to directory names. Remediation should involve updating Zoho ManageEngine ADAudit Plus to version 7270 or later to mitigate this vulnerability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-50785 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options