CVE-2023-39912: Path Traversal
Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed.
Other sources
Zoho ManageEngine ADManager Plus through 7202 allows admin users to download any file from the server machine via directory traversal.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-39912?
CVE-2023-39912 is a vulnerability in Zoho ManageEngine ADManager Plus through version 7202 that allows admin users to download any file from the server machine via directory traversal.
How can the vulnerability be exploited?
This vulnerability can be exploited by admin users to download any file from the server machine through directory traversal.
What is the severity of CVE-2023-39912?
CVE-2023-39912 has a severity level of medium with a severity value of 4.9.
How do I fix CVE-2023-39912?
The vendor has released a patch to fix this vulnerability. It is recommended to update Zoho ManageEngine ADManager Plus to version 7203 or higher to mitigate the risk.
Where can I find more information about CVE-2023-39912?
More information about CVE-2023-39912 can be found on the official website of Zoho ManageEngine as well as in the provided reference links.