Password Disclosure in Zoho ManageEngine ADManager Plus
CVE-2023-31492

6.5MEDIUM

Key Information:

Vendor: Zohocorp
Status: Manageengine Admanager Plus
Vendor: CVE Published:; 17 August 2023

What is CVE-2023-31492?

Zoho ManageEngine ADManager Plus prior to version 7183 contains a vulnerability that allows authenticated users to view default passwords associated with account restoration for unauthorized domains. This flaw can lead to unauthorized access, compromising sensitive data and administrative functionalities. Timely updates and monitoring are essential to mitigate the risks posed by this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/passtheticket/vulnerability-research/b...

https://www.manageengine.com/products/ad-manager/admanage...

http://packetstormsecurity.com/files/177091/ManageEngine-...

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 17, 2023
Vulnerability Reserved
Apr 29, 2023

JSON

Zohocorp

What is CVE-2023-31492?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.