PT-2022-19630
CVE-2022-29457
·
تاريخ النشر
2022-04-18
·
تاريخ التحديث
2022-09-30
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine ADSelfService Plus versions prior to 6121
ADAuditPlus versions prior to 7060
Exchange Reporter Plus versions prior to 5701
ADManagerPlus versions prior to 7131
Description
The issue allows NTLM Hash disclosure during certain storage-path configuration steps. This affects Zoho ManageEngine products, potentially leading to security breaches.
Recommendations
For Zoho ManageEngine ADSelfService Plus versions prior to 6121, update to version 6121 or later.
For ADAuditPlus versions prior to 7060, update to version 7060 or later.
For Exchange Reporter Plus versions prior to 5701, update to version 5701 or later.
For ADManagerPlus versions prior to 7131, update to version 7131 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾