CVE-2024-27312

Summary

Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability.

Affected Software

Weaknesses

• CWE-863: CWE-863 Incorrect Authorization

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html

References

• https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html

• ←Previous
• Next→