CVE-2024-36036: Insufficient Access Control Vulnerability
Published May 27, 2024
·Updated
Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.
Affected Software
15 affected components
Zoho ManageEngine ADAudit Plus<=7260
ZohoCorp ManageEngine ADAudit Plus<7.2
ZohoCorp ManageEngine ADAudit Plus=7.2-7200
ZohoCorp ManageEngine ADAudit Plus=7.2-7201
ZohoCorp ManageEngine ADAudit Plus=7.2-7202
ZohoCorp ManageEngine ADAudit Plus=7.2-7203
ZohoCorp ManageEngine ADAudit Plus=7.2-7210
ZohoCorp ManageEngine ADAudit Plus=7.2-7211
ZohoCorp ManageEngine ADAudit Plus=7.2-7212
ZohoCorp ManageEngine ADAudit Plus=7.2-7213
ZohoCorp ManageEngine ADAudit Plus=7.2-7215
ZohoCorp ManageEngine ADAudit Plus=7.2-7220
ZohoCorp ManageEngine ADAudit Plus=7.2-7250
ZohoCorp ManageEngine ADAudit Plus=7.2-7251
ZohoCorp ManageEngine ADAudit Plus=7.2-7260
Event History
May 27, 2024
CVE Published
via MITRE·05:58 PM
Data Sourced
via MITRE·05:58 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-36036?
CVE-2024-36036 has a moderate severity level as it allows unauthorized access to sensitive information.
2
How do I fix CVE-2024-36036?
To fix CVE-2024-36036, upgrade Zoho ManageEngine ADAudit Plus to version 7261 or later.
3
What versions of Zoho ManageEngine ADAudit Plus are affected by CVE-2024-36036?
CVE-2024-36036 affects all versions of Zoho ManageEngine ADAudit Plus up to and including version 7260.
4
What are the potential risks associated with CVE-2024-36036?
The potential risks include unauthorized access and modification of sensitive data and configurations by local agent machine users.
5
Is there a workaround for CVE-2024-36036?
Currently, the recommended solution is to upgrade to a secure version as there are no documented workarounds for CVE-2024-36036.