CVE-2014-0344: Medium severity ZohoCorp Manageengine Opstor vulnerability
Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0344?
CVE-2014-0344 has been assigned a medium severity rating due to the potential for privilege escalation.
How do I fix CVE-2014-0344?
To fix CVE-2014-0344, update ZOHO ManageEngine OpStor to version 8.4 or later, which addresses the privilege checking issue.
Who is affected by CVE-2014-0344?
CVE-2014-0344 affects ZOHO ManageEngine OpStor versions prior to build 8500, allowing remote authenticated users to gain Admin access.
What causes CVE-2014-0344?
CVE-2014-0344 is caused by improper privilege level checks in the Properties.do component of ZOHO ManageEngine OpStor.
What are the implications of CVE-2014-0344?
Exploitation of CVE-2014-0344 can lead to unauthorized administrative access, potentially compromising sensitive data and system integrity.