PT-2023-25313 · Zoho · Zoho Manageengine Cloud Security Plus+14

Dalt4Sec · Published 2023-08-28 · Updated 2024-03-12 · CVE-2023-35785

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Active Directory 360 versions 4315 and below Zoho ManageEngine ADAudit Plus versions 7202 and below Zoho ManageEngine ADManager Plus versions 7200 and below Zoho ManageEngine Asset Explorer versions 6993 and below Zoho ManageEngine Asset Explorer versions 7002 and below Zoho ManageEngine Cloud Security Plus versions 4161 and below Zoho ManageEngine Data Security Plus versions 6110 and below Zoho ManageEngine Eventlog Analyzer versions 12301 and below Zoho ManageEngine Exchange Reporter Plus versions 5709 and below Zoho ManageEngine Log360 versions 5315 and below Zoho ManageEngine Log360 UEBA versions 4045 and below Zoho ManageEngine M365 Manager Plus versions 4529 and below Zoho ManageEngine M365 Security Plus versions 4529 and below Zoho ManageEngine Recovery Manager Plus versions 6061 and below Zoho ManageEngine ServiceDesk Plus versions 14204 and below Zoho ManageEngine ServiceDesk Plus versions 14302 and below Zoho ManageEngine ServiceDesk Plus MSP versions 14300 and below Zoho ManageEngine SharePoint Manager Plus versions 4402 and below Zoho ManageEngine Support Center Plus versions 14300 and below

Description The issue allows an adversary to bypass two-factor authentication and take over the victim's account. A valid pair of username and password is required to leverage this issue. The vulnerability is related to 2FA bypass via a few TOTP authenticators.

Recommendations For Zoho ManageEngine Active Directory 360 versions 4315 and below, update to a version above 4315. For Zoho ManageEngine ADAudit Plus versions 7202 and below, update to a version above 7202. For Zoho ManageEngine ADManager Plus versions 7200 and below, update to a version above 7200. For Zoho ManageEngine Asset Explorer versions 6993 and below, update to a version above 6993. For Zoho ManageEngine Asset Explorer versions 7002 and below, update to a version above 7002. For Zoho ManageEngine Cloud Security Plus versions 4161 and below, update to a version above 4161. For Zoho ManageEngine Data Security Plus versions 6110 and below, update to a version above 6110. For Zoho ManageEngine Eventlog Analyzer versions 12301 and below, update to a version above 12301. For Zoho ManageEngine Exchange Reporter Plus versions 5709 and below, update to a version above 5709. For Zoho ManageEngine Log360 versions 5315 and below, update to a version above 5315. For Zoho ManageEngine Log360 UEBA versions 4045 and below, update to a version above 4045. For Zoho ManageEngine M365 Manager Plus versions 4529 and below, update to a version above 4529. For Zoho ManageEngine M365 Security Plus versions 4529 and below, update to a version above 4529. For Zoho ManageEngine Recovery Manager Plus versions 6061 and below, update to a version above 6061. For Zoho ManageEngine ServiceDesk Plus versions 14204 and below, update to a version above 14204. For Zoho ManageEngine ServiceDesk Plus versions 14302 and below, update to a version above 14302. For Zoho ManageEngine ServiceDesk Plus MSP versions 14300 and below, update to a version above 14300. For Zoho ManageEngine SharePoint Manager Plus versions 4402 and below, update to a version above 4402. For Zoho ManageEngine Support Center Plus versions 14300 and below, update to a version above 14300.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-35785

Affected Products

Zoho Manageengine Adaudit Plus

Zoho Manageengine Admanager Plus

Zoho Manageengine Active Directory 360

Zoho Manageengine Assetexplorer

Zoho Manageengine Cloud Security Plus

Zoho Manageengine Datasecurity Plus

Zoho Manageengine Eventlog Analyzer

Zoho Manageengine Exchange Reporter Plus

Zoho Manageengine Log360

Zoho Manageengine M365 Manager Plus

Zoho Manageengine M365 Security Plus

Zoho Manageengine Recovery Manager Plus

Zoho Manageengine Servicedesk Plus

Zoho Manageengine Sharepoint Manager Plus

Zoho Manageengine Supportcenter Plus

References · 12

• https://manageengine.com/security/advisory/CVE/CVE-2023-35785.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-35785 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35785 · Security Note
• https://twitter.com/VulmonFeeds/status/1696289959374647466 · Twitter Post
• https://t.me/cvenotify/57456 · Telegram Post
• https://t.me/cibsecurity/69323 · Telegram Post
• https://t.me/cvenotify/73603 · Telegram Post
• https://t.me/cvenotify/57796 · Telegram Post
• https://twitter.com/CVEnew/status/1696255418748608706 · Twitter Post
• https://t.me/cvenotify/57506 · Telegram Post
• https://twitter.com/autumn_good_35/status/1699816564021956899 · Twitter Post
• https://manageengine.com · Note