CVE-2014-0344

Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.

• CWE-264

• http://www.kb.cert.org/vuls/id/140886Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/66499
• http://www.kb.cert.org/vuls/id/140886Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/66499

Published

Mar 29, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0337Cross-site scripting (XSS) vulnerability in the web interfac…
• CVE-2014-0338Multiple cross-site scripting (XSS) vulnerabilities in the f…
• CVE-2014-0339Cross-site scripting (XSS) vulnerability in view.cgi in Webm…
• CVE-2014-0341Multiple cross-site scripting (XSS) vulnerabilities in Pivot…
• CVE-2014-0342Multiple unrestricted file upload vulnerabilities in fileupl…
• CVE-2014-0343The web interface on Virtual Access GW6110A routers with sof…
• CVE-2014-0346Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-0347The Settings module in Websense Triton Unified Security Cent…
• CVE-2014-0348The Artiva Agency Single Sign-On (SSO) implementation in Art…
• CVE-2014-0349Multiple unspecified vulnerabilities in J2k-Codec allow remo…
• CVE-2014-0350The Poco::Net::X509Certificate::verify method in the NetSSL …
• CVE-2014-0351The FortiManager protocol service in Fortinet FortiOS before…