CVE-2023-31492

Publicada em 17 ago 2023 · Atualizada em 26 nov 2024

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 7.9%

probabilidade de exploração

7.9%top 5% das CVEs

exploração observada

nãonenhuma fonte reporta

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.

Produtos afetados

n/a · n/a

Referências

http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-31492.html