CVE-2014-0344

MEDIUM · CVSS 6.5 EPSS 5.58%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-03-29 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-0344

Severity

MEDIUM

CVSS

6.5

EPSS

5.58%

Original Filing — NVD Description

Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.