CVE-2023-41356

NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files.

Score

CVSS 3.1 6.5 Medium

Status

Modified - twcert@cert.org.tw

Published

2023-11-03

Last modified

2024-10-14

Weaknesses

CWE-22, CWE-639

Affected products

• Tronclass Ilearn (Wisdomgarden)

References

• https://www.twcert.org.tw/tw/cp-132-7506-b4e29-1.html