CVE:CVE-2019-17112
CNNVD:CNNVD-201910-600
ZOHO ManageEngine DataSecurity Plus是美国卓豪（ZOHO）公司的一套敏感数据管理解决方案。该产品具有数据防泄漏、数据风险评估和文件服务器审核等功能。
Zoho ManageEngine DataSecurity Plus 5.0.1 5012之前版本中存在安全漏洞。攻击者可利用该漏洞访问邮件服务器的配置文件。
solution:Upgrade zohocorp manageengine_datasecurity_plus to a higher version than 4.0:4000,4.0:4002,4.0:4010,4.0:4015,4.0:4016,4.1:4100,4.1:4101,4.1:4110,4.1:4111,4.1:4120,4.2:4200,4.2:4201,4.2:4210,4.2:4211,4.3:4300,4.3:4301,4.3:4302,5.0:5000,5.0:5001,5.0:5002,5.0:5003,5.0:5004,5.0:5010,5.0:5011,and avoid the version 4.0:4000,4.0:4002,4.0:4010,4.0:4015,4.0:4016,4.1:4100,4.1:4101,4.1:4110,4.1:4111,4.1:4120,4.2:4200,4.2:4201,4.2:4210,4.2:4211,4.3:4300,4.3:4301,4.3:4302,5.0:5000,5.0:5001,5.0:5002,5.0:5003,5.0:5004,5.0:5010,5.0:5011