Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | * | * |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | * | * |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | * | * |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adselfservice_plus | Zohocorp | 6.1 | 6.1 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_adaudit_plus | Zohocorp | 7.0.0 | 7.0.0 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_admanager_plus | Zohocorp | 7.1 | 7.1 |
Manageengine_exchange_reporter_plus | Zohocorp | 5.7 | 5.7 |
Manageengine_exchange_reporter_plus | Zohocorp | 5.7 | 5.7 |
Manageengine_exchange_reporter_plus | Zohocorp | * | * |