CVE

CVE-2020-9346

CVE-2020-9346

Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user’s role.

Source: CVE-2020-9346

Exit mobile version