CVE-2024-36037— Insufficient Access Control Vulnerability
Possible ATT&CK Techniques 1AI
T1005 · Data from Local SystemGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-36037
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insufficient Access Control Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Zoho ManageEngine ADAudit Plus 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ZOHO ManageEngine ADAudit Plus是美国卓豪（ZOHO）公司的用于简化审计、证明合规性和检测威胁。 Zoho ManageEngine ADAudit Plus 7260及之前版本存在安全漏洞，该漏洞源于允许未经授权的本地代理计算机用户查看会话记录。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ManageEngine | ADAudit Plus | 0 ~ 7270 | - |
II. Public POCs for CVE-2024-36037
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-36037
请登录查看更多情报信息。
Patches & Fixes for CVE-2024-36037 (1)
Same Patch Batch · ManageEngine · 2024-05-27 · 4 CVEs total
| CVE-2024-27310 | 5.3 MEDIUM | DOS Vulnerability |
| CVE-2024-36036 | 4.2 MEDIUM | Insufficient Access Control Vulnerability |
| CVE-2024-27314 | 2.4 LOW | Stored XSS Vulnerability |
IV. Related Vulnerabilities
Same weakness: CWE-863
- CVE-2026-19182
OpenNMS v2 Alarm REST API inverted authorization check lets - CVE-2026-71193
OpenStack Designate <22.0.1 跨租户 DNS 劫持漏洞 - CVE-2026-73499
etcd: Watch API authorization bypass via open-ended range re - CVE-2026-63295
Project restriction `restricted.containers.privilege=isolate - CVE-2026-63296
Project restriction bypass via instance migration config ove
V. Comments for CVE-2024-36037
No comments yet