| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine opstor | ≤ 8.3 |
Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free