Zohocorp Password Manager Pro vulnerable to SQL Injection via Global Search Option

CVE-2024-5546

8.8HIGH

Key Information

Vendor
Manageengine
Status
Password Manager Pro
Pam360
Vendor
CVE Published:
28 August 2024

Summary

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

Affected Version(s)

Password Manager Pro < 12431

PAM360 < 7001

Refferences

https://www.manageengine.com/products/passwordmanagerpro/...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.