high7.5
CVE-2023-41344
NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability.
Impact
NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ncsist | Mobile Device Manager | Version 1.4 |