Direct Inward Dialing: +1 408 916 9892
Vulnerability details | |
Severity | Low |
CVE ID | CVE-2023-50785 |
Affected software versions | All ADAudit Plus builds below 7270 [How to find your build number?] |
Fixed version | Build 7270 |
Fixed on | December 29, 2023 |
An arbitrary admin only directory traversal vulnerability in ManageEngine ADAudit Plus' Disk Space Analysis has been fixed.
This vulnerability allows a malicious administrator to list folders in file paths located outside the designated installation directory.
Update your ADAudit Plus instance to the latest build — 7270 — using the service pack.
This issue was reported by SAM.
Please contact support@adauditplus.com for more details.