CVE-2022-23779

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses...

CVE-2022-24306

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled...

CVE-2022-24447

An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the level Operator, to access stored SSL certificates and associated key pairs during export...

CVE-2022-24305

Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation...

Privilege escalation

Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation...

Authorization

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled...

CVE-2022-24447

CVE-2022-24447 affects Zoho ManageEngine Key Manager Plus

CVE-2022-24447

An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the level Operator, to access stored SSL certificates and associated key pairs during export...

CVE-2022-24305

CVE-2022-24305 affects Zoho ManageEngine SharePoint Manager Plus prior to version 4329. Affected component is the application as deployed, with a vulnerability that could cause a sensitive data leak and lead to privilege escalation. Red Hat, CNVD, CNVD-derived sources and Nessus/PRION notes corro...

CVE-2022-24306

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled...

CVE-2022-24306

Zoho ManageEngine SharePoint Manager Plus is affected in all versions before 4329. The root cause is mishandled authorization that can lead to an account takeover. CVSS metrics (NVD) indicate high impact: CVSS v3.1 base score 9.8 (NETWORK, privileges=None, user interaction=None, confidentiality/ ...

CVE-2022-23779

CVE-2022-23779 affects Zoho ManageEngine Desktop Central prior to 10.1.2137.8. The vulnerability is an information-disclosure flaw in which the internal server hostname can be learned by reading HTTP redirect responses, notably via the /themes endpoint, where a redirect can leak the internal host...

CVE-2022-23779

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses...

ZOHO ManageEngine SharePoint Manager Plus 安全漏洞

ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. An authorization issue vulnerability exists in versions prior to ZOHO ManageEngine SharePoint Manager Plus 4329, which stems from a network system or The vulnerability is caused by a lack of...

CVE-2022-24447: Undefined Security Weakness

An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the level Operator, to access stored SSL certificates and associated key pairs during export...

PT-2022-16594 · Zoho · Zoho Manageengine Sharepoint Manager Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine SharePoint Manager Plus versions prior to 4329 Description: The issue is related to a sensitive data leak that can lead to privilege escalation. Recommendations: For versions prior to 4329, update to version 4329 or later to...

ZOHO ManageEngine SharePoint Manager Plus 安全漏洞

ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. An elevation of privilege vulnerability exists in versions of ZOHO ManageEngine SharePoint Manager Plus prior to 4329, which could be exploited by an attacker to cause sensitive data to be...

CVE-2022-24305: Undefined Security Weakness

Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation...

CVE-2022-24306: Incorrect Authorization

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled...

PT-2022-16595

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SharePoint Manager Plus versions prior to 4329 Description The issue is related to authorization being mishandled, which allows for account takeover. Recommendations For versions prior to 4329, update to version 4329 or later...