CVE-2008-0476

CWE-287 — Improper Authentication3 documents3 sources
Severity
6.4MEDIUM
EPSS
0.3%
top 44.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Manageengine Applications Manager
Timeline
PublishedJan 29
Latest updateMay 1

Description

ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows remote attackers to obtain sensitive information and change settings via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-f286-r7gg-78m6: ManageEngine Applications Manager 8↗2022-05-01
▶
CVEList
CVE-2008-0476: ManageEngine Applications Manager 8↗2008-01-29
▶
CVE-2008-0476 (MEDIUM CVSS 6.4) | ManageEngine Applications Manager 8 | cvebase.io