CVE-2019-17112

An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access the configuration file of the mail server (except for the password).

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2019-10-09

Last modified

2024-08-05

Weaknesses

CWE-552

Affected products

• Manageengine Datasecurity Plus (Zohocorp)

References

• https://excellium-services.com/cert-xlm-advisory/cve-2019-17112/
• https://www.manageengine.com/data-security/release-notes.html