6.5
CVE-2023-31492
- EPSS 0.24%
- Published 17.08.2023 23:15:09
- Last modified 21.11.2024 08:01:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.
Data is provided by the National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Admanager Plus Version < 7.1
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update-
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7100
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7101
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7102
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7110
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7111
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7112
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7113
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7114
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7115
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7116
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7117
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7118
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7120
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7121
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7122
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7123
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7124
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7125
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7126
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7130
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7131
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7140
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7141
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7150
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7151
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7160
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7161
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7162
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7163
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7170
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7171
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7180
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7181
Zohocorp ≫ Manageengine Admanager Plus Version7.1 Update7182
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.469 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.