CVE-2024-9097

IDOR

State: Published
Severity: 3.5 Low
Published: Feb 5, 2025
Updated: Feb 12, 2025
Reserved: Sep 23, 2024

Description

ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacker to change the username in the chat.

Scores

CVSS	Score	Vector	Source
3.1	3.5 Low	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N	ManageEngine

Weaknesses

CWE-639 Authorization Bypass Through User-Controlled Key

Affected Products

Product	Versions
Endpoint CentralManageEngine	before 11.3.2440.09Affected

References

https://www.manageengine.com/products/desktop-central/cve-2024-9097.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.