Help desk privilege escalation via misconfigured permissions

Privilege escalation in Zoho Corporation ADManager Plus 7203 and earlier allows remote authenticated users to modify unauthorized computer attributes. Misconfigured permissions in the built-in Modify Computers help desk role expose management of Additional Custom Attributes beyond the role's intended authorization. A technician account assigned that role is required, and exploitation permits unauthorized changes to computer objects managed through the application.