Vulnerability Details CVE-2017-11557
An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.2%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
- http://applications.com
- http://manageengine.com
- https://www.manageengine.com/
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18738
- http://applications.com
- http://manageengine.com
- https://www.manageengine.com/
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18738
Products affected by CVE-2017-11557
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.3