March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Greenbug Targets Pakistani Telecom Sector
May 20, 2020
Rewterz Threat Alert – WolfRAT Info Stealing Malware
May 21, 2020
Rewterz Threat Alert – Greenbug Targets Pakistani Telecom Sector
May 20, 2020
Rewterz Threat Alert – WolfRAT Info Stealing Malware
May 21, 2020
Severity
Medium
Analysis Summary
Zoho ManageEngine Service Plus could allow a remote authenticated attacker to obtain sensitive information. By sending a getFileProtectionSettings call to AjaxServlet, a remote attacker could exploit this vulnerability to obtain the File Protection password.
Impact
Information Disclosure
Affected Vendors
Zoho
Affected Products
Zoho ManageEngine Service Plus 11.1 Build 11110
Remediation
Upgrade to the latest version of Zoho ManageEngine Service Plus (11.1 build 11112 or later),