CVE-2019-17112

Published: Oct 9, 2019Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access the configuration file of the mail server (except for the password).

Affected (24)

Products: Zohocorp: Manageengine Datasecurity Plus

Zohocorp

1 product

Manageengine Datasecurity Plus

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Datasecurity Plus	Version 4.0 4000
Zohocorp Manageengine Datasecurity Plus	Version 4.0 4002
Zohocorp Manageengine Datasecurity Plus	Version 4.0 4010
Zohocorp Manageengine Datasecurity Plus	Version 4.0 4015
Zohocorp Manageengine Datasecurity Plus	Version 4.0 4016
Zohocorp Manageengine Datasecurity Plus	Version 4.1 4100
Zohocorp Manageengine Datasecurity Plus	Version 4.1 4101
Zohocorp Manageengine Datasecurity Plus	Version 4.1 4110
Zohocorp Manageengine Datasecurity Plus	Version 4.1 4111
Zohocorp Manageengine Datasecurity Plus	Version 4.1 4120
Zohocorp Manageengine Datasecurity Plus	Version 4.2 4200
Zohocorp Manageengine Datasecurity Plus	Version 4.2 4201
Zohocorp Manageengine Datasecurity Plus	Version 4.2 4210
Zohocorp Manageengine Datasecurity Plus	Version 4.2 4211
Zohocorp Manageengine Datasecurity Plus	Version 4.3 4300
Zohocorp Manageengine Datasecurity Plus	Version 4.3 4301
Zohocorp Manageengine Datasecurity Plus	Version 4.3 4302
Zohocorp Manageengine Datasecurity Plus	Version 5.0 5000
Zohocorp Manageengine Datasecurity Plus	Version 5.0 5001
Zohocorp Manageengine Datasecurity Plus	Version 5.0 5002
Zohocorp Manageengine Datasecurity Plus	Version 5.0 5003
Zohocorp Manageengine Datasecurity Plus	Version 5.0 5004
Zohocorp Manageengine Datasecurity Plus	Version 5.0 5010
Zohocorp Manageengine Datasecurity Plus	Version 5.0 5011