CVE-2020-15595

An issue was discovered in Zoho Application Control Plus before version 10.0.511

Medium · published September 29, 2020

CVSS v3.1
4.3
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to configure elements included in the scope of elements managed by the product) allows an attacker to retrieve the entire list of the IP ranges and subnets configured in the product and consequently obtain information about the cartography of the internal networks to which the product has access.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.02207 · 82.4th percentile
Published
2020-09-29T12:56Z
EPSS history
Timeline
  • 29 SEP 12:56Z
    An issue was discovered in Zoho Application Control Plus before version 10.0.511
    cvelistv5