Privilege escalation

2022-04-0519:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%

JSON

Zoho ManageEngine ADAudit Plus before 7055 allows authenticated Privilege Escalation on Integrated products. This occurs because a password field is present in a JSON response.

CPENameOperatorVersion
manageengine_adaudit_pluseq7.0 7002
manageengine_adaudit_pluseq7.0 7003
manageengine_adaudit_pluseq7.0 7004
manageengine_adaudit_pluseq7.0 7005
manageengine_adaudit_pluseq7.0 7000
manageengine_adaudit_plusle6.0
manageengine_adaudit_pluseq7.0 7006
manageengine_adaudit_pluseq7.0 7007
manageengine_adaudit_pluseq7.0 7008
manageengine_adaudit_pluseq7.0 7050

Name	Operator	Version
manageengine_adaudit_plus	eq	7.0 7002
manageengine_adaudit_plus	eq	7.0 7003
manageengine_adaudit_plus	eq	7.0 7004
manageengine_adaudit_plus	eq	7.0 7005
manageengine_adaudit_plus	eq	7.0 7000
manageengine_adaudit_plus	le	6.0
manageengine_adaudit_plus	eq	7.0 7006
manageengine_adaudit_plus	eq	7.0 7007
manageengine_adaudit_plus	eq	7.0 7008
manageengine_adaudit_plus	eq	7.0 7050