Lucene search
HistoryAug 17, 2023 - 11:15 p.m.
CVE-2023-31492
zoho
admanager plus
7182
cve-2023-31492
security vulnerability
default passwords
unauthorized access
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.6%
Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.
Affected configurations
Node
zohocorpmanageengine_admanager_plusRange<7.1
ORzohocorpmanageengine_admanager_plusMatch7.1-
ORzohocorpmanageengine_admanager_plusMatch7.17100
ORzohocorpmanageengine_admanager_plusMatch7.17101
ORzohocorpmanageengine_admanager_plusMatch7.17102
ORzohocorpmanageengine_admanager_plusMatch7.17110
ORzohocorpmanageengine_admanager_plusMatch7.17111
ORzohocorpmanageengine_admanager_plusMatch7.17112
ORzohocorpmanageengine_admanager_plusMatch7.17113
ORzohocorpmanageengine_admanager_plusMatch7.17114
ORzohocorpmanageengine_admanager_plusMatch7.17115
ORzohocorpmanageengine_admanager_plusMatch7.17116
ORzohocorpmanageengine_admanager_plusMatch7.17117
ORzohocorpmanageengine_admanager_plusMatch7.17118
ORzohocorpmanageengine_admanager_plusMatch7.17120
ORzohocorpmanageengine_admanager_plusMatch7.17121
ORzohocorpmanageengine_admanager_plusMatch7.17122
ORzohocorpmanageengine_admanager_plusMatch7.17123
ORzohocorpmanageengine_admanager_plusMatch7.17124
ORzohocorpmanageengine_admanager_plusMatch7.17125
ORzohocorpmanageengine_admanager_plusMatch7.17126
ORzohocorpmanageengine_admanager_plusMatch7.17130
ORzohocorpmanageengine_admanager_plusMatch7.17131
ORzohocorpmanageengine_admanager_plusMatch7.17140
ORzohocorpmanageengine_admanager_plusMatch7.17141
ORzohocorpmanageengine_admanager_plusMatch7.17150
ORzohocorpmanageengine_admanager_plusMatch7.17151
ORzohocorpmanageengine_admanager_plusMatch7.17160
ORzohocorpmanageengine_admanager_plusMatch7.17161
ORzohocorpmanageengine_admanager_plusMatch7.17162
ORzohocorpmanageengine_admanager_plusMatch7.17163
ORzohocorpmanageengine_admanager_plusMatch7.17170
ORzohocorpmanageengine_admanager_plusMatch7.17171
ORzohocorpmanageengine_admanager_plusMatch7.17180
ORzohocorpmanageengine_admanager_plusMatch7.17181
ORzohocorpmanageengine_admanager_plusMatch7.17182
| CPE | Name | Operator | Version |
|---|---|---|---|
| zohocorp:manageengine_admanager_plus | zohocorp manageengine admanager plus | lt | 7.1 |
Related
zdt
zdt
nvd
nvd
CVE-2023-31492
2023-08-17 23:15:09
exploitdb
exploitdb
ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
2024-02-13 00:00:00
prion
prion
Default credentials
2023-08-17 23:15:00
cvelist
cvelist
CVE-2023-31492
2023-08-17 00:00:00
packetstorm
packetstorm
ManageEngine ADManager Plus Recovery Password Disclosure
2024-02-13 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.6%
Related for CVE-2023-31492