Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page.
References
Link | Resource |
---|---|
https://www.manageengine.com/products/desktop-central/vulnerabilities-in-reports-module.html | Vendor Advisory |
Configurations
Information
Published : 2022-01-10 06:11
Updated : 2022-01-13 12:04
NVD link : CVE-2021-46166
Mitre link : CVE-2021-46166
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
zohocorp
- manageengine_desktop_central