From Cyber Security News – Manage Engine Analytics Vulnerability Allows User Account Takeover

News

From Cyber Security News – Manage Engine Analytics Vulnerability Allows User Account Takeover

shaikh Saqib March 17, 2025

A high-severity authentication vulnerability in ManageEngine Analytics Plus on-premise installations has been identified, potentially allowing malicious actors to gain unauthorized access to Active Directory (AD) authenticated user accounts. The vulnerability, tracked as CVE-2025-1724, affects all Windows builds prior to 6130 and was patched on March 11, 2025. Security teams are urged to update affected systems
The post Manage Engine Analytics Vulnerability Allows User Account Takeover appeared first on Cyber Security News. Read More

Active Directory authentication exploit AD authentication flow weakness authentication bypass flaw authentication encryption flaw CVE-2025-1724 cyber awareness cyber defense cyber protection cybersecurity cybersecurity compliance issues cybersecurity news cybersecurity vulnerability disclosure data analytics dashboard exposure data breaches digital privacy enterprise security risk hacking hacking news infosec infosec news ManageEngine Analytics Plus vulnerability ManageEngine bug bounty report ManageEngine security patch network security network security threat note online security privilege escalation risk security patch implementation security perspective security updates sensitive data compromise SOC vulnerability management threat threat intelligence threat note threatnote token replay attack unauthorized account access Windows build 6130 update

Last updated on March 18, 2025