CVE Catalog
CVE-2023-39912
MediumCVSS 4.9Exploitation Probability (EPSS)
High risk4.04%
89th percentile - higher than 89% of all known CVEs
Summary
Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed.
Risk Assessment
The ability for unauthorized users to read arbitrary files may lead to the exposure of sensitive data, posing a significant security risk to the organization.
Recommendation
It is recommended to upgrade Zoho ManageEngine ADManager Plus to version 7203 or later to mitigate this vulnerability.
Original NVD description (English source)
Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed.