CVE-2014-0344

Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin…

published March 29, 2014

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05794 · 93.0th percentile
Published
2014-03-29T20:00Z
EPSS history
Timeline
  • 29 MAR 20:00Z
    Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin…
    cvelistv5