Threats tagged 'ghsa-v53h-q7r3-wr4w'

ManageEngine M365 Manager Plus versions below 4818 contain a vulnerability where an authenticated technician can exploit insufficient permission validation in the delegated administration interface to escalate privileges beyond their intended scope. This privilege escalation can lead to remote code execution during administrative processing. The vulnerability has a critical severity with a CVSS score of 9.9.