Zohocorp Password Manager Pro vulnerable to SQL Injection via Global Search Option

CVE-2024-5546

8.8HIGH

Key Information

Vendor: Manageengine
Status: Password Manager Pro; Pam360
Vendor: CVE Published:; 28 August 2024

Summary

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

Affected Version(s)

Password Manager Pro < 12431

PAM360 < 7001

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Aug 28, 2024
Vulnerability Reserved.
May 30, 2024

Collectors

NVD DatabaseMitre Database