Exploit for #VU25643 Improper access control in Zoho ManageEngine EventLog Analyzer


Vulnerability identifier: #VU25643

Vulnerability risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C]

CVE-ID: CVE-2019-19774

CWE-ID: CWE-284

Exploitation vector: Network

Exploits in database: 1

Impact: Information disclosure

Vulnerable software:
Zoho ManageEngine EventLog Analyzer
Server applications / IDS/IPS systems, Firewalls and proxy servers

Vendor: Zoho Corporation