An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?methodeditUser request.
Publication date: Thu, 23 May 2019 23:29:00 +0000