CVE-2014-0344

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-29 · updated 2026-06-17
Weakness: CWE-264

Description

Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.

Affected products

Zohocorp Manageengine Opstor: through 8.3

References

http://www.kb.cert.org/vuls/id/140886
http://www.securityfocus.com/bid/66499
http://www.kb.cert.org/vuls/id/140886
http://www.securityfocus.com/bid/66499

Get alerted when CVE-2014-0344 or the next vulnerability affects your stack