CVE-2019-17112

An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012

Medium · published October 9, 2019

CVSS v3.0
4.3
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access the configuration file of the mail server (except for the password).

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.02122 · 81.7th percentile
Published
2019-10-09T19:40Z
EPSS history
Timeline
  • 09 OCT 19:40Z
    An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012
    cvelistv5