CVE-2023-32783
HIGHZoho ManageEngine ADAudit Plus 7.1.1 - Audit Detection Bypass via User Account Name Suffix
Title source: llmDescription
The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming user accounts with a "$" symbol suffix. NOTE: the vendor states "We do not consider this as a security bug and it's an expected behaviour."
References (1)
Core 1
Core References
Exploit, Third Party Advisory
https://www.peteslade.com/post/manageengine-adauditplus-cve-2023-32783
Scores
CVSS v3
7.5
EPSS
0.0016
EPSS Percentile
36.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-863
Status
published
Products (1)
zohocorp/manageengine_adaudit_plus
7.1.1
Published
Aug 07, 2023
Tracked Since
Feb 18, 2026