CVE-2019-17112: Medium severity zoho manageengine datasecurity plus vulnerability
An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access the configuration file of the mail server (except for the password).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-17112?
CVE-2019-17112 is an issue discovered in Zoho ManageEngine DataSecurity Plus before version 5.0.1 5012 that allows a basic user with "Operator" access level to access the configuration file of the mail server (except for the password).
How severe is CVE-2019-17112?
CVE-2019-17112 has a severity value of 4.3, which is considered medium.
Which software versions are affected by CVE-2019-17112?
Zoho ManageEngine DataSecurity Plus versions 4.0-4000 to 5.0-5011 are affected by CVE-2019-17112.
How can I fix CVE-2019-17112?
To fix CVE-2019-17112, update Zoho ManageEngine DataSecurity Plus to version 5.0.1 5012 or later.
Where can I find more information about CVE-2019-17112?
You can find more information about CVE-2019-17112 at the following references: - https://excellium-services.com/cert-xlm-advisory/cve-2019-17112/ - https://www.manageengine.com/data-security/release-notes.html