CVE-2023-32783

n/a / n/a PUBLISHED

Description (CNA)

The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming user accounts with a "$" symbol suffix. NOTE: the vendor states "We do not consider this as a security bug and it's an expected behaviour."

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.peteslade.com/post/manageengine-adauditplus-cve-2023-32783

ADP enrichment

CVE

No English description supplied.

https://www.peteslade.com/post/manageengine-adauditplus-cve-2023-32783

CISA-ADP

No English description supplied.

No references supplied.