Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects of the application state.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Manageengine_access_manager_plus | Zohocorp | 4.1-build4100 (including) | 4.1-build4100 (including) |
| Manageengine_access_manager_plus | Zohocorp | 4.1-build4101 (including) | 4.1-build4101 (including) |
| Manageengine_access_manager_plus | Zohocorp | 4.2-build4200 (including) | 4.2-build4200 (including) |
| Manageengine_access_manager_plus | Zohocorp | 4.2-build4201 (including) | 4.2-build4201 (including) |
| Manageengine_access_manager_plus | Zohocorp | 4.2-build4202 (including) | 4.2-build4202 (including) |