CVE-2023-32783: High severity zoho manageengine adaudit plus vulnerability
Published Aug 7, 2023
·Updated
The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming user accounts with a "$" symbol suffix.
Affected Software
4 affected components
All of the following
ZohoCorp ManageEngine ADAudit Plus=7.1.1
Microsoft Windows
ZohoCorp ManageEngine ADAudit Plus=7.1.1
Microsoft Windows
Event History
Aug 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-32783?
CVE-2023-32783 is a vulnerability in Zoho ManageEngine ADAudit Plus 7.1.1 that allows an attacker to bypass audit detection by creating or renaming user accounts with a "$" symbol suffix.
2
What is the severity of CVE-2023-32783?
The severity of CVE-2023-32783 is high, with a severity value of 7.5.
3
Which software is affected by CVE-2023-32783?
Zoho ManageEngine ADAudit Plus 7.1.1 is affected by CVE-2023-32783.
4
How can an attacker exploit CVE-2023-32783?
An attacker can exploit CVE-2023-32783 by creating or renaming user accounts with a "$" symbol suffix to bypass audit detection.
5
Is Microsoft Windows vulnerable to CVE-2023-32783?
No, Microsoft Windows is not vulnerable to CVE-2023-32783.