CVE-2024-9097

Summary

CVE-2024-9097 is a new IDOR (Insecure Direct Object Reference) vulnerability affecting ManageEngine Endpoint Central. Versions prior to 11.3.2440.09 are susceptible to this issue. An attacker can exploit this vulnerability by manipulating the username in the chat function, potentially gaining unauthorized access to other users' information or making unintended changes to their settings. This could lead to serious privacy and security implications for affected organizations. It is recommended that users upgrade to the latest version of ManageEngine Endpoint Central to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.