← voltar
CVE-2025-1724

Account Takeover

CVSS 7.4 HIGHEPSS 1.2%CWE-798
Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Zohocorp · Analytics Plus

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.manageengine.com/analytics-plus/CVE-2025-1724.htmlhttps://www.zoho.com/analytics/onpremise/CVE-2025-1724.html