Lucene search

[email protected]NVD:CVE-2021-46166

HistoryJan 10, 2022 - 2:11 p.m.

CVE-2021-46166

2022-01-1014:11:32

CWE-200

[email protected]

web.nvd.nist.gov

zoho manageengine

desktop central

authenticated users

sensitive information

database

reports page

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

36.8%

JSON

Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page.

Affected configurations

Nvd

Node

zohocorpmanageengine_desktop_centralRange<10.0.662

VendorProductVersionCPE
zohocorpmanageengine_desktop_central*cpe:2.3:a:zohocorp:manageengine_desktop_central:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zohocorp	manageengine_desktop_central	*	cpe:2.3:a:zohocorp:manageengine_desktop_central::::::::

References

www.manageengine.com/products/desktop-central/vulnerabilities-in-reports-module.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

36.8%

JSON

Related for NVD:CVE-2021-46166

cvelist1 cve1 prion1 cnvd1