Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a users API key, and then access external APIs.
Weakness
The product does not handle or incorrectly handles an exceptional condition.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Manageengine_firewall_analyzer | Zohocorp | 12.5-build125450 (including) | 12.5-build125450 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.5-build125451 (including) | 12.5-build125451 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.5-build125452 (including) | 12.5-build125452 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.5-build125453 (including) | 12.5-build125453 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.5-build125455 (including) | 12.5-build125455 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.5-build125456 (including) | 12.5-build125456 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.5-build125664 (including) | 12.5-build125664 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126000 (including) | 12.6-build126000 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126001 (including) | 12.6-build126001 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126100 (including) | 12.6-build126100 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126101 (including) | 12.6-build126101 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126102 (including) | 12.6-build126102 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126103 (including) | 12.6-build126103 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126113 (including) | 12.6-build126113 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126114 (including) | 12.6-build126114 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126115 (including) | 12.6-build126115 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126116 (including) | 12.6-build126116 (including) |
| Manageengine_firewall_analyzer | Zohocorp | 12.6-build126117 (including) | 12.6-build126117 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.5-build125450 (including) | 12.5-build125450 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.5-build125451 (including) | 12.5-build125451 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.5-build125452 (including) | 12.5-build125452 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.5-build125453 (including) | 12.5-build125453 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.5-build125455 (including) | 12.5-build125455 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.5-build125456 (including) | 12.5-build125456 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.5-build125664 (including) | 12.5-build125664 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126000 (including) | 12.6-build126000 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126001 (including) | 12.6-build126001 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126100 (including) | 12.6-build126100 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126101 (including) | 12.6-build126101 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126102 (including) | 12.6-build126102 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126103 (including) | 12.6-build126103 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126113 (including) | 12.6-build126113 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126114 (including) | 12.6-build126114 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126115 (including) | 12.6-build126115 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126116 (including) | 12.6-build126116 (including) |
| Manageengine_netflow_analyzer | Zohocorp | 12.6-build126117 (including) | 12.6-build126117 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.5-build125450 (including) | 12.5-build125450 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.5-build125451 (including) | 12.5-build125451 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.5-build125452 (including) | 12.5-build125452 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.5-build125453 (including) | 12.5-build125453 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.5-build125455 (including) | 12.5-build125455 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.5-build125456 (including) | 12.5-build125456 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.5-build125664 (including) | 12.5-build125664 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126000 (including) | 12.6-build126000 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126001 (including) | 12.6-build126001 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126100 (including) | 12.6-build126100 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126101 (including) | 12.6-build126101 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126102 (including) | 12.6-build126102 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126103 (including) | 12.6-build126103 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126113 (including) | 12.6-build126113 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126114 (including) | 12.6-build126114 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126115 (including) | 12.6-build126115 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126116 (including) | 12.6-build126116 (including) |
| Manageengine_network_configuration_manager | Zohocorp | 12.6-build126117 (including) | 12.6-build126117 (including) |
| Manageengine_opmanager | Zohocorp | 12.5-build125450 (including) | 12.5-build125450 (including) |
| Manageengine_opmanager | Zohocorp | 12.5-build125451 (including) | 12.5-build125451 (including) |
| Manageengine_opmanager | Zohocorp | 12.5-build125452 (including) | 12.5-build125452 (including) |
| Manageengine_opmanager | Zohocorp | 12.5-build125453 (including) | 12.5-build125453 (including) |
| Manageengine_opmanager | Zohocorp | 12.5-build125455 (including) | 12.5-build125455 (including) |
| Manageengine_opmanager | Zohocorp | 12.5-build125456 (including) | 12.5-build125456 (including) |
| Manageengine_opmanager | Zohocorp | 12.5-build125664 (including) | 12.5-build125664 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126000 (including) | 12.6-build126000 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126001 (including) | 12.6-build126001 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126100 (including) | 12.6-build126100 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126101 (including) | 12.6-build126101 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126102 (including) | 12.6-build126102 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126103 (including) | 12.6-build126103 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126113 (including) | 12.6-build126113 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126114 (including) | 12.6-build126114 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126115 (including) | 12.6-build126115 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126116 (including) | 12.6-build126116 (including) |
| Manageengine_opmanager | Zohocorp | 12.6-build126117 (including) | 12.6-build126117 (including) |
| Manageengine_opmanager_msp | Zohocorp | 12.5-build125450 (including) | 12.5-build125450 (including) |
| Manageengine_opmanager_msp | Zohocorp | 12.5-build125656 (including) | 12.5-build125656 (including) |
| Manageengine_opmanager_msp | Zohocorp | 12.5-build125664 (including) | 12.5-build125664 (including) |
| Manageengine_opmanager_msp | Zohocorp | 12.6-build126000 (including) | 12.6-build126000 (including) |
| Manageengine_opmanager_msp | Zohocorp | 12.6-build126001 (including) | 12.6-build126001 (including) |
| Manageengine_opmanager_msp | Zohocorp | 12.6-build126100 (including) | 12.6-build126100 (including) |
| Manageengine_opmanager_msp | Zohocorp | 12.6-build126103 (including) | 12.6-build126103 (including) |
| Manageengine_opmanager_msp | Zohocorp | 12.6-build126113 (including) | 12.6-build126113 (including) |
| Manageengine_opmanager_msp | Zohocorp | 12.6-build126117 (including) | 12.6-build126117 (including) |
| Manageengine_opmanager_plus | Zohocorp | 12.5-build125450 (including) | 12.5-build125450 (including) |
| Manageengine_opmanager_plus | Zohocorp | 12.5-build125656 (including) | 12.5-build125656 (including) |
| Manageengine_opmanager_plus | Zohocorp | 12.5-build125664 (including) | 12.5-build125664 (including) |
| Manageengine_opmanager_plus | Zohocorp | 12.6-build126000 (including) | 12.6-build126000 (including) |
| Manageengine_opmanager_plus | Zohocorp | 12.6-build126001 (including) | 12.6-build126001 (including) |
| Manageengine_opmanager_plus | Zohocorp | 12.6-build126100 (including) | 12.6-build126100 (including) |
| Manageengine_opmanager_plus | Zohocorp | 12.6-build126103 (including) | 12.6-build126103 (including) |
| Manageengine_opmanager_plus | Zohocorp | 12.6-build126113 (including) | 12.6-build126113 (including) |
| Manageengine_opmanager_plus | Zohocorp | 12.6-build126117 (including) | 12.6-build126117 (including) |
| Manageengine_oputils | Zohocorp | 12.5-build125450 (including) | 12.5-build125450 (including) |
| Manageengine_oputils | Zohocorp | 12.5-build125451 (including) | 12.5-build125451 (including) |
| Manageengine_oputils | Zohocorp | 12.5-build125452 (including) | 12.5-build125452 (including) |
| Manageengine_oputils | Zohocorp | 12.5-build125453 (including) | 12.5-build125453 (including) |
| Manageengine_oputils | Zohocorp | 12.5-build125455 (including) | 12.5-build125455 (including) |
| Manageengine_oputils | Zohocorp | 12.5-build125456 (including) | 12.5-build125456 (including) |
| Manageengine_oputils | Zohocorp | 12.5-build125664 (including) | 12.5-build125664 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126000 (including) | 12.6-build126000 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126001 (including) | 12.6-build126001 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126100 (including) | 12.6-build126100 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126101 (including) | 12.6-build126101 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126102 (including) | 12.6-build126102 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126103 (including) | 12.6-build126103 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126113 (including) | 12.6-build126113 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126114 (including) | 12.6-build126114 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126115 (including) | 12.6-build126115 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126116 (including) | 12.6-build126116 (including) |
| Manageengine_oputils | Zohocorp | 12.6-build126117 (including) | 12.6-build126117 (including) |