ManageEngine EventLog Analyzer (<= 13071)

Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing an unauthenticated actor to register a local collector by sending a specially crafted registration request.