Detections
Analytics
CVE-2017-11557
medium
Description
An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request.
References
https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18738