CVE Vulnerabilities

CVE-2023-31492

Insufficiently Protected Credentials

Published: Aug 17, 2023 | Modified: Feb 13, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Manageengine_admanager_plus Zohocorp * 7.1 (excluding)
Manageengine_admanager_plus Zohocorp 7.1 (including) 7.1 (including)
Manageengine_admanager_plus Zohocorp 7.1-7100 (including) 7.1-7100 (including)
Manageengine_admanager_plus Zohocorp 7.1-7101 (including) 7.1-7101 (including)
Manageengine_admanager_plus Zohocorp 7.1-7102 (including) 7.1-7102 (including)
Manageengine_admanager_plus Zohocorp 7.1-7110 (including) 7.1-7110 (including)
Manageengine_admanager_plus Zohocorp 7.1-7111 (including) 7.1-7111 (including)
Manageengine_admanager_plus Zohocorp 7.1-7112 (including) 7.1-7112 (including)
Manageengine_admanager_plus Zohocorp 7.1-7113 (including) 7.1-7113 (including)
Manageengine_admanager_plus Zohocorp 7.1-7114 (including) 7.1-7114 (including)
Manageengine_admanager_plus Zohocorp 7.1-7115 (including) 7.1-7115 (including)
Manageengine_admanager_plus Zohocorp 7.1-7116 (including) 7.1-7116 (including)
Manageengine_admanager_plus Zohocorp 7.1-7117 (including) 7.1-7117 (including)
Manageengine_admanager_plus Zohocorp 7.1-7118 (including) 7.1-7118 (including)
Manageengine_admanager_plus Zohocorp 7.1-7120 (including) 7.1-7120 (including)
Manageengine_admanager_plus Zohocorp 7.1-7121 (including) 7.1-7121 (including)
Manageengine_admanager_plus Zohocorp 7.1-7122 (including) 7.1-7122 (including)
Manageengine_admanager_plus Zohocorp 7.1-7123 (including) 7.1-7123 (including)
Manageengine_admanager_plus Zohocorp 7.1-7124 (including) 7.1-7124 (including)
Manageengine_admanager_plus Zohocorp 7.1-7125 (including) 7.1-7125 (including)
Manageengine_admanager_plus Zohocorp 7.1-7126 (including) 7.1-7126 (including)
Manageengine_admanager_plus Zohocorp 7.1-7130 (including) 7.1-7130 (including)
Manageengine_admanager_plus Zohocorp 7.1-7131 (including) 7.1-7131 (including)
Manageengine_admanager_plus Zohocorp 7.1-7140 (including) 7.1-7140 (including)
Manageengine_admanager_plus Zohocorp 7.1-7141 (including) 7.1-7141 (including)
Manageengine_admanager_plus Zohocorp 7.1-7150 (including) 7.1-7150 (including)
Manageengine_admanager_plus Zohocorp 7.1-7151 (including) 7.1-7151 (including)
Manageengine_admanager_plus Zohocorp 7.1-7160 (including) 7.1-7160 (including)
Manageengine_admanager_plus Zohocorp 7.1-7161 (including) 7.1-7161 (including)
Manageengine_admanager_plus Zohocorp 7.1-7162 (including) 7.1-7162 (including)
Manageengine_admanager_plus Zohocorp 7.1-7163 (including) 7.1-7163 (including)
Manageengine_admanager_plus Zohocorp 7.1-7170 (including) 7.1-7170 (including)
Manageengine_admanager_plus Zohocorp 7.1-7171 (including) 7.1-7171 (including)
Manageengine_admanager_plus Zohocorp 7.1-7180 (including) 7.1-7180 (including)
Manageengine_admanager_plus Zohocorp 7.1-7181 (including) 7.1-7181 (including)
Manageengine_admanager_plus Zohocorp 7.1-7182 (including) 7.1-7182 (including)

Potential Mitigations

References