ZOHO ManageEngine SharePoint Manager Plus权限提升漏洞

ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. An elevation of privilege vulnerability exists in versions of ZOHO ManageEngine SharePoint Manager Plus prior to 4329, which could be exploited by an attacker to cause sensitive data to be...

CVE-2022-24306: Incorrect Authorization

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled...

CVE-2022-24305: Undefined Security Weakness

Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation...

PT-2022-16595

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SharePoint Manager Plus versions prior to 4329 Description The issue is related to authorization being mishandled, which allows for account takeover. Recommendations For versions prior to 4329, update to version 4329 or later...