CVE Catalog
CVE-2023-38332
MediumCVSS 6.5Exploitation Probability (EPSS)
High risk3.05%
86th percentile - higher than 86% of all known CVEs
Summary
Zoho ManageEngine ADManager Plus version 7201 allows authenticated users to take over another user's account via sensitive information disclosure.
Risk Assessment
Account takeover by another user can lead to unauthorized access to organizational data and resources, posing a serious security threat.
Recommendation
It is recommended to update to the latest version of ADManager Plus and monitor user account access.
Original NVD description (English source)
Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure.