Authentication Bypass Vulnerability in Zoho ManageEngine OpManager
CVE-2019-15106 · HIGH Severity
AV:N/AC:L/AU:N/C:P/I:P/A:P
An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for the password. For example, if the username is admin, the password is admin@opm.
Learn more about our Cis Benchmark Audit For Server Software.