Authorization

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled...

CVE-2022-24305

CVE-2022-24305 affects Zoho ManageEngine SharePoint Manager Plus prior to version 4329. Affected component is the application as deployed, with a vulnerability that could cause a sensitive data leak and lead to privilege escalation. Red Hat, CNVD, CNVD-derived sources and Nessus/PRION notes corro...

CVE-2022-24305

Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation...

CVE-2022-24306

Zoho ManageEngine SharePoint Manager Plus is affected in all versions before 4329. The root cause is mishandled authorization that can lead to an account takeover. CVSS metrics (NVD) indicate high impact: CVSS v3.1 base score 9.8 (NETWORK, privileges=None, user interaction=None, confidentiality/ ...

CVE-2022-24306

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled...

ZOHO ManageEngine SharePoint Manager Plus 安全漏洞

ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. An authorization issue vulnerability exists in versions prior to ZOHO ManageEngine SharePoint Manager Plus 4329, which stems from a network system or The vulnerability is caused by a lack of...

PT-2022-16594 · Zoho · Zoho Manageengine Sharepoint Manager Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine SharePoint Manager Plus versions prior to 4329 Description: The issue is related to a sensitive data leak that can lead to privilege escalation. Recommendations: For versions prior to 4329, update to version 4329 or later to...