9.8

CVE-2022-24306

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4000
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4001
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4002
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4003
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4004
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4005
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4006
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4007
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4008
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4009
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4010
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4011
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4012
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4013
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4014
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4015
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4016
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4017
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4018
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4020
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4021
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4022
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4023
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4024
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4025
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4026
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4027
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4028
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4029
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4030
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4031
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4032
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4033
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4100
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4101
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4102
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4103
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4104
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4105
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4106
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4107
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4108
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4109
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4110
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4200
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4201
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4300
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4301
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4302
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4303
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4304
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4305
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4306
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4307
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4308
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4309
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4310
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4311
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4312
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4313
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4314
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4315
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4316
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4317
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4318
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4319
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4320
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4321
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4322
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4323
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4324
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4325
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4326
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4327
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version - Update build_4328
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.38% 0.821
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329
Vendor Advisory
Release Notes