AI Score
Confidence
Low
EPSS
Percentile
81.6%
Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.
www.kb.cert.org/vuls/id/140886
www.securityfocus.com/bid/66499