medium4.3
CVE-2019-17112
An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012.
Impact
An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access the configuration file of the mail server (except for the password).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Datasecurity Plus | Versions 4.0, 4.1, 4.2, 4.3, 5.0 |