medium5.3
CVE-2017-11557
An issue was discovered in ZOHO ManageEngine Applications Manager 12.3.
Impact
An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Applications Manager | Version 12.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://applications.com
- http://manageengine.com
- https://www.manageengine.com/
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18738
- http://applications.com
- http://manageengine.com
- https://www.manageengine.com/
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18738