CVE:CVE-2019-19799
CNNVD:CNNVD-202003-832
ZOHO ManageEngine Applications Manager是美国卓豪（ZOHO）公司的一套IT运维管理解决方案。该产品具有应用性能管理、故障管理、报表生成和SLA管理等功能。
ZOHO ManageEngine Applications Manager 14590及之前中存在访问控制错误漏洞。远程攻击者可借助WieldFeedServlet Servlet利用该漏洞获取与许可证相关的信息。
solution:Upgrade zohocorp manageengine_applications_manager to a higher version than 14.5,14.5,14.5:build14500,14.5:build14510,14.5:build14520,14.5:build14530,14.5:build14540,14.5:build14560,14.5:build14570,14.5:build14580,14.5:build14590,and avoid the version (,14.5),14.5,14.5:build14500,14.5:build14510,14.5:build14520,14.5:build14530,14.5:build14540,14.5:build14560,14.5:build14570,14.5:build14580,14.5:build14590