CVE-2022-29457

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions prior to 6121 ADAuditPlus versions prior to 7060 Exchange Reporter Plus versions prior to 5701 ADManagerPlus versions prior to 7131

Description The issue allows NTLM Hash disclosure during certain storage-path configuration steps. This affects Zoho ManageEngine products, potentially leading to security breaches.

Recommendations For Zoho ManageEngine ADSelfService Plus versions prior to 6121, update to version 6121 or later. For ADAuditPlus versions prior to 7060, update to version 7060 or later. For Exchange Reporter Plus versions prior to 5701, update to version 5701 or later. For ADManagerPlus versions prior to 7131, update to version 7131 or later.