PT-2022-16595 · Zoho · Zoho Manageengine Sharepoint Manager Plus

Sahil Dhar · Published 2022-03-02 · Updated 2022-03-09 · CVE-2022-24306

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SharePoint Manager Plus versions prior to 4329

Description The issue is related to authorization being mishandled, which allows for account takeover.

Recommendations For versions prior to 4329, update to version 4329 or later to resolve the issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2022-24306

Affected Products

Zoho Manageengine Sharepoint Manager Plus

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-24306 · Security Note
• https://manageengine.com/sharepoint-management-reporting/release-notes.html#4329 · Vendor Advisory
• https://t.me/cibsecurity/38303 · Telegram Post