CVE-2024-27312

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27312
Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html Vendor Advisory
https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_pam360:6.6:build6600:*:*:*:*:*:*
History

25 Nov 2024, 15:14

Type Values Removed Values Added
First Time Zohocorp manageengine Pam360
Zohocorp
References () https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html - () https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html - Vendor Advisory
CPE cpe:2.3:a:zohocorp:manageengine_pam360:6.6:build6600:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:*

21 Nov 2024, 09:04

Type Values Removed Values Added
References () https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html - () https://www.manageengine.com/privileged-access-management/advisory/cve-2024-27312.html -

07 Oct 2024, 12:15

Type Values Removed Values Added
Summary (en) Zoho ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability. (en) Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability.
CWE CWE-862 CWE-863

07 Jun 2024, 09:15

Type Values Removed Values Added
CWE CWE-862
Summary
  • (es) Zoho ManageEngine PAM360 versión 6601 es vulnerable a una vulnerabilidad de autorización que permite a un usuario con pocos privilegios realizar acciones administrativas. Nota: Esta vulnerabilidad afecta solo a la versión PAM360 6600. No hay otras versiones aplicables a esta vulnerabilidad.

20 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-20 13:15

Updated : 2024-11-25 15:14

NVD link : CVE-2024-27312

Mitre link : CVE-2024-27312

CVE.ORG link : CVE-2024-27312

JSON object : View

Products Affected

zohocorp

  • manageengine_pam360
CWE
CWE-863

Incorrect Authorization