First published: Thu Oct 24 2024(Updated: )
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.
Credit: 0fc0942c-577d-436f-ae8e-945763c79b02
Affected Software | Affected Version | How to fix |
---|---|---|
Zoho ManageEngine ADAudit Plus | <8.1 | |
Zoho ManageEngine ADAudit Plus | =8.1 | |
Zoho ManageEngine ADAudit Plus | =8.1-8100 | |
Zoho ManageEngine ADAudit Plus | =8.1-8110 | |
Zoho ManageEngine ADAudit Plus | =8.1-8120 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-5608 is classified as a critical vulnerability due to its potential impact on data integrity through SQL injection.
To fix CVE-2024-5608, upgrade to ManageEngine ADAudit Plus version 8121 or later.
CVE-2024-5608 affects all versions of Zoho ManageEngine ADAudit Plus below 8121.
CVE-2024-5608 is a SQL Injection vulnerability found in the technician reports feature.
The potential risks of CVE-2024-5608 include unauthorized access to sensitive data and manipulation of the database.