Direct Inward Dialing: +1 408 916 9890
Some versions of O365 Manager Plus have the unauthenticated change to integration system vulnerability. This article explains how you can identify if your O365 Manager Plus installation is affected, and fix it. It also offers the mitigation steps to protect your installation in case it is not affected.
O365 Manager Plus had a vulnerable endpoint which allowed a user to integrate O365 Manager Plus with any other supported ManageEngine product, bypassing authentication. This could lead to data leak.
All O365 Manager Plus builds below 4333 are affected.
This is a critical issue. As this vulnerability could be exploited without authentication, from any publicly exposed O365 Manager Plus installation, the risks posed could be critical.
Update the product to the latest build, 4334, using the service pack.
If you need further information, have any questions, or face any difficulties upgrading or performing the recommended steps, please get in touch with us at email@example.com, or +1-844-245-1108 (toll free).
Need further assistance? Fill this form, and we'll contact you rightaway.