CVE-2024-36036

Published: May 27, 2024Modified: Jun 17, 2026

4.2

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Exploitability: 1.1 / Impact: 2.7

Source: NVD

Description

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.

Affected (14)

Products: Zohocorp: Manageengine Adaudit Plus

Zohocorp

1 product

Manageengine Adaudit Plus

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Adaudit Plus	Before 7.2
Zohocorp Manageengine Adaudit Plus	Version 7.2 7200
Zohocorp Manageengine Adaudit Plus	Version 7.2 7201
Zohocorp Manageengine Adaudit Plus	Version 7.2 7202
Zohocorp Manageengine Adaudit Plus	Version 7.2 7203
Zohocorp Manageengine Adaudit Plus	Version 7.2 7210
Zohocorp Manageengine Adaudit Plus	Version 7.2 7211
Zohocorp Manageengine Adaudit Plus	Version 7.2 7212
Zohocorp Manageengine Adaudit Plus	Version 7.2 7213
Zohocorp Manageengine Adaudit Plus	Version 7.2 7215
Zohocorp Manageengine Adaudit Plus	Version 7.2 7220
Zohocorp Manageengine Adaudit Plus	Version 7.2 7250
Zohocorp Manageengine Adaudit Plus	Version 7.2 7251
Zohocorp Manageengine Adaudit Plus	Version 7.2 7260

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://www.manageengine.com/products/active-directory-audit/cve-2024-36036.html

Source: 0fc0942c-577d-436f-ae8e-945763c79b02

Vendor Advisory

https://www.manageengine.com/products/active-directory-audit/cve-2024-36036.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.