Zohocorp Password Manager Pro vulnerable to SQL Injection via Global Search Option
CVE-2024-5546
8.8HIGH
Key Information:
- Vendor
Manageengine
- Vendor
- CVE Published:
- 28 August 2024
What is CVE-2024-5546?
An authenticated SQL injection vulnerability has been identified in ManageEngine Password Manager Pro and PAM360, affecting versions prior to 12431 and 7001, respectively. This vulnerability allows attackers to exploit the global search functionality, potentially accessing and manipulating sensitive data hosted in the affected systems. Timely updates and patches are critical to mitigate the risks associated with this vulnerability.
Affected Version(s)
PAM360 0 < 7001
Password Manager Pro 0 < 12431