Security Advisory
CVE-2020-9346
8.8
HIGH
Vulnerability Description
Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user's role.
Published Date
March 16, 2020
Official Source
NIST NVD Advisory