ZOHO ManageEngine Log360 Cross-Site Request Forgery Vulnerability

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.A cross-site request forgery vulnerability exists in ZOHO ManageEngine Log360, which stems from the product’s failure to adequately validate that requests are coming from trusted users. An attack could disable login security settings through this vulnerability.