AI analysis
Claude Opus · 8 Nov 2026, 10:21 CET
ManageEngine Log360 and EventLog Analyzer flaw could allow unauthorized access
ManageEngine Log360 and EventLog Analyzer builds 13062 and below contain a critical access control flaw (CVSS 3.1: 9.1) that could let an unauthenticated network attacker gain unauthorized access. Review the vendor advisory and update promptly.
In plain terms
ManageEngine Log360 and EventLog Analyzer are Zoho products that collect and analyse logs. Logs are the records computers and applications keep about what happens on them, and security teams use these tools to spot suspicious activity. According to the official description, versions 13062 and below have a flaw that could let an outsider get into the product without permission.
The flaw is an access control problem. Access control is the set of checks that decides who may see or do what. Because these tools usually hold sensitive security data and often connect to many systems across a network, unauthorized access could expose that information or let someone tamper with it. Any organisation running these products, especially where the web interface can be reached from untrusted networks, should treat this as urgent.
Technical analysis
The weakness is classified as CWE-284 (Improper Access Control). The official description says only that versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product. The record does not identify the vulnerable component, endpoint or code path, and does not say whether the root cause is an authentication bypass, a missing authorization check or a flawed default configuration.
The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. The attack can be carried out over the network, requires low complexity, needs no privileges and needs no user interaction. Scope is unchanged, so the assessed impact is limited to the vulnerable product itself. Confidentiality and integrity impacts are both rated high and availability is rated none. This suggests the main risks are reading and changing data or configuration inside the product, rather than disrupting the service.