ManageEngine M365 Manager Plus Privilege Escalation Vulnerability

Zohocorp ManageEngine M365 Manager Plus versions below 4818 are affected by an insufficient permission validation flaw in the delegated administration interface.

An authenticated technician may exploit this issue to escalate privileges beyond their intended scope.

• Affected versions: below 4818
• Requires an authenticated technician account
• Could result in remote code execution during administrative processing