cve/2023/CVE-2023-31492.md

CVE-2023-31492

Description

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.

POC

Reference

• http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html
• https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md

Github

• https://github.com/fkie-cad/nvd-json-data-feeds