Lucene search

K
cvelistMitreCVELIST:CVE-2022-29081
HistoryApr 28, 2022 - 7:16 p.m.

CVE-2022-29081

2022-04-2819:16:57
mitre
www.cve.org
4
zoho manageengine
access manager plus
password manager pro
pam360
access-control bypass
rest api

AI Score

9.7

Confidence

High

EPSS

0.592

Percentile

97.8%

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs (for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize) via the …/RestAPI substring.

AI Score

9.7

Confidence

High

EPSS

0.592

Percentile

97.8%

Related for CVELIST:CVE-2022-29081