Code injection

2022-03-0215:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.2%

JSON

An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the level Operator, to access stored SSL certificates and associated key pairs during export.

CPENameOperatorVersion
manageengine_key_manager_pluseq6.0 6000
manageengine_key_manager_pluseq6.0 6001
manageengine_key_manager_pluseq6.0 6002
manageengine_key_manager_plusle5.9
manageengine_key_manager_pluseq6.1 6100
manageengine_key_manager_pluseq6.1 6150
manageengine_key_manager_pluseq6.1 6151
manageengine_key_manager_pluseq6.1 6160
manageengine_key_manager_pluseq6.1 6161

Name	Operator	Version
manageengine_key_manager_plus	eq	6.0 6000
manageengine_key_manager_plus	eq	6.0 6001
manageengine_key_manager_plus	eq	6.0 6002
manageengine_key_manager_plus	le	5.9
manageengine_key_manager_plus	eq	6.1 6100
manageengine_key_manager_plus	eq	6.1 6150
manageengine_key_manager_plus	eq	6.1 6151
manageengine_key_manager_plus	eq	6.1 6160
manageengine_key_manager_plus	eq	6.1 6161