| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine adaudit plus | = 7.1.1 |
The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming user accounts with a "$" symbol suffix. NOTE: the vendor states "We do not consider this as a security bug and it's an expected behaviour."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free