Global infos:

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.

CVE Status: Awaiting Analysis

References:

0fc0942c-577d-436f-ae8e-945763c79b02

af854a3a-2127-422b-91ae-364da2661108

Metrics:

Attribute	Value
Attack Complexity	HIGH
Attack Vector	LOCAL
Availability Impact	NONE
Base Score	4.2
Base Severity	MEDIUM
Confidentiality Impact	LOW
Integrity Impact	LOW
Privileges Required	LOW
Scope	CHANGED
User Interaction	NONE
Vector String	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Exploitability Score	1.1
Impact Score	2.7
Source	0fc0942c-577d-436f-ae8e-945763c79b02
Type	Secondary

Links:

Exploit-db
Github