ManageEngine Log360 and EventLog Analyzer improper access control
Strangers can get into this log analysis server software without permission!
Summary
An access control flaw lets an attacker gain unauthorized access to ManageEngine Log360 and EventLog Analyzer. Versions 13062 and below are affected.
What to do
Check that the product runs a version newer than 13062, and read the vendor's advisory. The sources name no fixed version.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen