CVE-2024-9097CWE-639

IDOR

Low · published February 5, 2025

CVSS v3.1
3.5
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.7th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-02-05T12:40Z
EPSS history
Timeline
  • 05 FEB 12:40Z
    IDOR
    cvelistv5