CVE-2024-36037: Insufficient Access Control Vulnerability
Published May 27, 2024
·Updated
Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.
Affected Software
14 affected components
ZohoCorp ManageEngine ADAudit Plus<7.2
ZohoCorp ManageEngine ADAudit Plus=7.2-7200
ZohoCorp ManageEngine ADAudit Plus=7.2-7201
ZohoCorp ManageEngine ADAudit Plus=7.2-7202
ZohoCorp ManageEngine ADAudit Plus=7.2-7203
ZohoCorp ManageEngine ADAudit Plus=7.2-7210
ZohoCorp ManageEngine ADAudit Plus=7.2-7211
ZohoCorp ManageEngine ADAudit Plus=7.2-7212
ZohoCorp ManageEngine ADAudit Plus=7.2-7213
ZohoCorp ManageEngine ADAudit Plus=7.2-7215
ZohoCorp ManageEngine ADAudit Plus=7.2-7220
ZohoCorp ManageEngine ADAudit Plus=7.2-7250
ZohoCorp ManageEngine ADAudit Plus=7.2-7251
ZohoCorp ManageEngine ADAudit Plus=7.2-7260
Event History
May 27, 2024
CVE Published
via MITRE·05:59 PM
Data Sourced
via MITRE·05:59 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-36037?
CVE-2024-36037 has a high severity rating due to unauthorized access to sensitive session recordings.
2
How do I fix CVE-2024-36037?
To fix CVE-2024-36037, update Zoho ManageEngine ADAudit Plus to version 7261 or higher.
3
What versions are affected by CVE-2024-36037?
CVE-2024-36037 affects Zoho ManageEngine ADAudit Plus versions 7260 and below.
4
What type of vulnerability is CVE-2024-36037?
CVE-2024-36037 is a local privilege escalation vulnerability that allows unauthorized users access to session recordings.
5
Who can exploit CVE-2024-36037?
CVE-2024-36037 can be exploited by unauthorized local agent machine users.