Eventlog Analyzer
Monthly
ManageEngine Log360 and EventLog Analyzer builds 13071 and below allow an unauthenticated, network-reachable actor to register a local collector by sending a specially crafted registration request, bypassing authentication on that interface. The issue is rated CVSS 7.5 with confidentiality-only impact (C:H/I:N/A:N) and maps to CWE-284 improper access control. No public exploit was identified at time of analysis.
Missing access-control enforcement in Zoho ManageEngine Log360 and EventLog Analyzer 13062 and below lets remote attackers reach product functionality without authorization, with the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) indicating no credentials, privileges, or user interaction are needed against an exposed instance, and high confidentiality and integrity impact but no availability impact. Both the SIEM/log-management products share the affected build range, so internet-facing or otherwise reachable management interfaces are the exposure that matters. No public exploit code and no confirmed active exploitation were identified at time of analysis, but the priority decision for this CVE is act_now given the unauthenticated network vector and the sensitivity of the data these products aggregate.
ManageEngine Log360 and EventLog Analyzer builds 13071 and below allow an unauthenticated, network-reachable actor to register a local collector by sending a specially crafted registration request, bypassing authentication on that interface. The issue is rated CVSS 7.5 with confidentiality-only impact (C:H/I:N/A:N) and maps to CWE-284 improper access control. No public exploit was identified at time of analysis.
Missing access-control enforcement in Zoho ManageEngine Log360 and EventLog Analyzer 13062 and below lets remote attackers reach product functionality without authorization, with the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) indicating no credentials, privileges, or user interaction are needed against an exposed instance, and high confidentiality and integrity impact but no availability impact. Both the SIEM/log-management products share the affected build range, so internet-facing or otherwise reachable management interfaces are the exposure that matters. No public exploit code and no confirmed active exploitation were identified at time of analysis, but the priority decision for this CVE is act_now given the unauthenticated network vector and the sensitivity of the data these products aggregate.