CVE-2024-9097: IDOR
ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9097?
CVE-2024-9097 is classified as a medium severity vulnerability due to its exploitation potential without requiring authentication.
How do I fix CVE-2024-9097?
To mitigate CVE-2024-9097, upgrade ManageEngine Endpoint Central to version 11.3.2440.09 or later.
What is an IDOR vulnerability in CVE-2024-9097?
An IDOR vulnerability, like in CVE-2024-9097, allows unauthorized changes to resources—in this case, an attacker's ability to modify usernames in the chat.
Which versions of ManageEngine Endpoint Central are affected by CVE-2024-9097?
ManageEngine Endpoint Central versions prior to 11.3.2440.09 are affected by CVE-2024-9097.
Can CVE-2024-9097 be exploited without authentication?
Yes, CVE-2024-9097 can be exploited without authentication, making it easier for attackers to manipulate the chat usernames.