Sensitive Data Leak in Zoho ManageEngine SharePoint Manager Plus
CVE-2022-24305

9.8CRITICAL

Key Information:

Vendor

Zohocorp
Status
Manageengine Sharepoint Manager Plus
Vendor
CVE Published:
2 March 2022

What is CVE-2022-24305?

Zoho ManageEngine SharePoint Manager Plus is susceptible to a vulnerability that allows sensitive data exposure, potentially enabling unauthorized privilege escalation. This issue affects versions prior to 4329, making it critical for users to upgrade to safeguard against potential exploitation. The vulnerability can lead to significant security implications if left unaddressed.

References

https://www.manageengine.com/sharepoint-management-report...
x_refsource_MISC

EPSS Score

13% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.