PT-2022-19630 · Zoho Manageengine · Adaudit Plus+3

Metin Yunus Kandemir · Published 2022-04-18 · Updated 2022-09-30 · CVE-2022-29457

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions prior to 6121 ADAuditPlus versions prior to 7060 Exchange Reporter Plus versions prior to 5701 ADManagerPlus versions prior to 7131

Description The issue allows NTLM Hash disclosure during certain storage-path configuration steps. This affects Zoho ManageEngine products, potentially leading to security breaches.

Recommendations For Zoho ManageEngine ADSelfService Plus versions prior to 6121, update to version 6121 or later. For ADAuditPlus versions prior to 7060, update to version 7060 or later. For Exchange Reporter Plus versions prior to 5701, update to version 5701 or later. For ADManagerPlus versions prior to 7131, update to version 7131 or later.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2022-29457

Affected Products

Adaudit Plus

Admanager Plus

Adselfservice Plus

Exchange Reporter Plus

References · 9

• 🔥 https://exploit-db.com/exploits/50904 · Exploit
• 🔥 https://docs.unsafe-inline.com/0day/multiple-manageengine-applications-critical-information-disclosure-vulnerability · Exploit
• 🔥 http://packetstormsecurity.com/files/167051/ManageEngine-ADSelfService-Plus-Build-6118-NTLMv2-Hash-Exposure.html · Exploit
• https://manageengine.com/products/self-service-password/release-notes.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-29457 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29457 · Security Note
• https://t.me/cvenotify/30065 · Telegram Post
• https://t.me/cvenotify/29124 · Telegram Post
• https://t.me/cibsecurity/41077 · Telegram Post