Threats tagged 'ghsa-r4p6-57j4-fc8p'

Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below have an authentication bypass vulnerability in the local collector registration process. This flaw allows an unauthenticated attacker to register a local collector by sending a specially crafted registration request. The vulnerability has a high severity with a CVSS score of 7.5, indicating a network attack vector with no required privileges or user interaction and high confidentiality impact. No patch or remediation information is provided in the available data.