CVE-2023-31492

Published 17 Aug 2023 · Updated 26 Nov 2024

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 7.9%

exploitation probability

7.9%top 5% of all CVEs

observed exploitation

nono source reports it

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.

Affected products

n/a · n/a

References

http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-31492.html