CVE-2023-50785: Path Traversal
Published Jan 25, 2024
·Updated
Zoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary directories via path traversal.
Affected Software
13 affected components
ZohoCorp ManageEngine ADAudit Plus=7.2-7200
ZohoCorp ManageEngine ADAudit Plus=7.2-7201
ZohoCorp ManageEngine ADAudit Plus=7.2-7202
ZohoCorp ManageEngine ADAudit Plus=7.2-7203
ZohoCorp ManageEngine ADAudit Plus=7.2-7210
ZohoCorp ManageEngine ADAudit Plus=7.2-7211
ZohoCorp ManageEngine ADAudit Plus=7.2-7212
ZohoCorp ManageEngine ADAudit Plus=7.2-7213
ZohoCorp ManageEngine ADAudit Plus=7.2-7215
ZohoCorp ManageEngine ADAudit Plus=7.2-7220
ZohoCorp ManageEngine ADAudit Plus=7.2-7250
ZohoCorp ManageEngine ADAudit Plus=7.2-7251
ZohoCorp ManageEngine ADAudit Plus=7.2-7260
Event History
Jan 25, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-50785?
CVE-2023-50785 is classified as a medium severity vulnerability due to its potential to disclose sensitive directory names.
2
How do I fix CVE-2023-50785?
To fix CVE-2023-50785, upgrade Zoho ManageEngine ADAudit Plus to version 7270 or later.
3
Who is affected by CVE-2023-50785?
CVE-2023-50785 affects admin users of Zoho ManageEngine ADAudit Plus versions prior to 7270.
4
What type of vulnerability is CVE-2023-50785?
CVE-2023-50785 is a path traversal vulnerability that allows unauthorized directory name disclosure.
5
Can CVE-2023-50785 lead to further attacks?
Yes, the directory name disclosure could potentially aid attackers in conducting more targeted attacks.