2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2022-29457" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2022-04-18T20:15:09.263" ,
2024-11-23 15:12:23 +00:00
"lastModified" : "2024-11-21T06:59:07.487" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps."
} ,
{
"lang" : "es" ,
"value" : "Zoho ManageEngine ADSelfService Plus versiones anteriores a 6121, ADAuditPlus versi\u00f3n 7060, Exchange Reporter Plus versi\u00f3n 5701, y ADManagerPlus versi\u00f3n 7131, permiten una divulgaci\u00f3n de NTLM Hash durante determinados pasos de configuraci\u00f3n de la ruta de almacenamiento"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
2024-11-23 15:12:23 +00:00
"baseScore" : 8.8 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-11-23 15:12:23 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 5.9
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P" ,
2024-11-23 15:12:23 +00:00
"baseScore" : 6.5 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "SINGLE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
2024-11-23 15:12:23 +00:00
"availabilityImpact" : "PARTIAL"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.0 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-522"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "7.0.0" ,
"matchCriteriaId" : "ED61D61A-99CB-4279-AEF4-4F5D509AAAB6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "4647CCE1-92BF-486A-A245-2E6BADC14C4D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7000:*:*:*:*:*:*" ,
"matchCriteriaId" : "AC907344-7ACC-41CA-AA1D-8AEE1C604F92"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7002:*:*:*:*:*:*" ,
"matchCriteriaId" : "6957BD6B-3CCB-4C45-B3E9-DE988CDEF122"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7003:*:*:*:*:*:*" ,
"matchCriteriaId" : "B932650D-3BCF-4A9C-B518-04C212925C1D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7004:*:*:*:*:*:*" ,
"matchCriteriaId" : "FF8CFB6B-DD8F-45BD-9F17-7BE6014AFE17"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7005:*:*:*:*:*:*" ,
"matchCriteriaId" : "583C263D-F219-434C-A452-9F4A337FAF7F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7006:*:*:*:*:*:*" ,
"matchCriteriaId" : "154B0AC9-FB9F-42FC-85FF-B6F4DA77F625"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7007:*:*:*:*:*:*" ,
"matchCriteriaId" : "2C71406B-D0A7-480F-BD70-F01AF8800749"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7008:*:*:*:*:*:*" ,
"matchCriteriaId" : "5643057F-7579-465C-9C0F-F83617C6BE02"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7050:*:*:*:*:*:*" ,
"matchCriteriaId" : "BD6AFBED-42E1-400B-A198-71220D228770"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7051:*:*:*:*:*:*" ,
"matchCriteriaId" : "6F4BB38D-4E2A-41A0-8ED2-5D23FDE1BF6E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7052:*:*:*:*:*:*" ,
"matchCriteriaId" : "E14468CC-1FAF-4F3C-872A-283923E11BBE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7053:*:*:*:*:*:*" ,
"matchCriteriaId" : "F05B3F91-1ECB-4000-A0E1-814DC82CE9DE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7054:*:*:*:*:*:*" ,
"matchCriteriaId" : "F216675D-EC1B-4C67-ACA4-002C3A31976D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7055:*:*:*:*:*:*" ,
"matchCriteriaId" : "A70FBB7E-A8D7-4DF9-BF7C-C6E8FC6FFCA4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "7.1" ,
"matchCriteriaId" : "B9D72627-17F9-427E-907B-56EA0A498131"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*" ,
"matchCriteriaId" : "736740CB-A328-4163-BAC4-6C881A24C8B1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*" ,
"matchCriteriaId" : "9B806083-7309-4215-AF81-DCC4D90B7876"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*" ,
"matchCriteriaId" : "A741CDA8-D1A8-4F83-AE54-7D3D3C433825"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*" ,
"matchCriteriaId" : "09563D6F-690B-4C7A-BA25-52D009724A74"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*" ,
"matchCriteriaId" : "30FAC23B-831E-4904-AB3B-85A3C068CEB8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*" ,
"matchCriteriaId" : "9347D3CF-B5D1-4ACE-83E1-73748EF15120"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*" ,
"matchCriteriaId" : "322E0562-4586-4DF4-A935-C2447883495B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB9151D6-BD21-4268-9371-FF702C1AD84B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*" ,
"matchCriteriaId" : "B371E93E-7C85-42DD-AA7F-9B43D8D02963"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*" ,
"matchCriteriaId" : "094EEFA4-BD16-4F79-8133-62F9E2C8C675"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*" ,
"matchCriteriaId" : "DC5A6297-98E3-45C8-95FB-7F4E65D133BF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*" ,
"matchCriteriaId" : "93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*" ,
"matchCriteriaId" : "9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*" ,
"matchCriteriaId" : "7848B31C-AB51-486B-8655-7D7A060BAFFC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*" ,
"matchCriteriaId" : "1CFB5C4A-B717-4CC2-AE03-336C63D17B96"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*" ,
"matchCriteriaId" : "456D49D7-F04D-4003-B429-8D5504959D04"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*" ,
"matchCriteriaId" : "BB788440-904B-430E-BF5B-12ADA816477E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*" ,
"matchCriteriaId" : "876CC4D6-9546-4D39-965A-EF5A4AF4AD93"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*" ,
"matchCriteriaId" : "85432FE8-946F-448D-A92A-FF549EDC52F8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*" ,
"matchCriteriaId" : "813E1389-A949-427C-92C6-3974702FEA5D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "6.1" ,
"matchCriteriaId" : "A79AAA12-67D4-4343-9E0B-249C07144DD8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "B2320EEE-367C-4CE1-8AC4-048B97DE71F3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6100:*:*:*:*:*:*" ,
"matchCriteriaId" : "B1E5484A-D834-4C7A-962C-C78CF0CDAA8B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6101:*:*:*:*:*:*" ,
"matchCriteriaId" : "6FA21683-29F7-44EB-84C6-D29C6C64DE97"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6102:*:*:*:*:*:*" ,
"matchCriteriaId" : "7BE0B72F-2963-4666-9A82-7812BFB52DB0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6103:*:*:*:*:*:*" ,
"matchCriteriaId" : "85DD7E26-B9C5-4DCC-8F50-F5884AF61105"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6104:*:*:*:*:*:*" ,
"matchCriteriaId" : "AC37608E-E61B-4333-8358-50C8377A1ABF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6105:*:*:*:*:*:*" ,
"matchCriteriaId" : "C13EF458-FE95-49E5-9A13-04C96C3F114A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6106:*:*:*:*:*:*" ,
"matchCriteriaId" : "12919644-3D85-488C-89A3-58A1FB31279D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6107:*:*:*:*:*:*" ,
"matchCriteriaId" : "75206A94-9155-48D7-A378-5020877B8B97"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6108:*:*:*:*:*:*" ,
"matchCriteriaId" : "E50CF265-DE6F-4281-8300-06D54185AA43"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6109:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB577C00-1412-4F87-B91A-5E956EB2213F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6110:*:*:*:*:*:*" ,
"matchCriteriaId" : "4C7681FA-FC15-49CE-9288-3C4E361F4D21"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6111:*:*:*:*:*:*" ,
"matchCriteriaId" : "80F12A94-93C5-4442-8FB3-4E02E4DECCEB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6112:*:*:*:*:*:*" ,
"matchCriteriaId" : "17270CDC-C800-4B5A-BEAA-83AF455BBBEA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6113:*:*:*:*:*:*" ,
"matchCriteriaId" : "DAFE53B1-7736-4560-8FEF-AA0F56FEACF2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6114:*:*:*:*:*:*" ,
"matchCriteriaId" : "C5491174-9BE3-4FBF-AEF5-6A313E2CEBA0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6115:*:*:*:*:*:*" ,
"matchCriteriaId" : "E407C5F1-43D0-4B5D-A3B8-A48A7024CCB1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6116:*:*:*:*:*:*" ,
"matchCriteriaId" : "2EC89DCA-D24A-46BB-8086-C306BB4CDABD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6117:*:*:*:*:*:*" ,
"matchCriteriaId" : "45BEF834-4A4B-4CB0-BEBF-73A03FDAC773"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6118:*:*:*:*:*:*" ,
"matchCriteriaId" : "E319DA11-0C76-4F52-A197-FFBF4F30BB55"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6119:*:*:*:*:*:*" ,
"matchCriteriaId" : "B928577F-3183-4305-9009-A8C6970477D6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6120:*:*:*:*:*:*" ,
"matchCriteriaId" : "CE6F33B5-418E-4B38-81EB-090E4F3AF89A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "5.7" ,
"matchCriteriaId" : "3DA0580F-8167-450E-A1E9-0F1F7FC7E2C9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "3FC399C6-4299-4744-9FC5-13CFE7478164"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5700:*:*:*:*:*:*" ,
"matchCriteriaId" : "E913F3D6-9F94-4130-94FF-37F4D81BAEF4"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://packetstormsecurity.com/files/167051/ManageEngine-ADSelfService-Plus-Build-6118-NTLMv2-Hash-Exposure.html" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Exploit" ,
"Third Party Advisory" ,
"VDB Entry"
]
} ,
{
"url" : "https://docs.unsafe-inline.com/0day/multiple-manageengine-applications-critical-information-disclosure-vulnerability" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Exploit" ,
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://www.manageengine.com/products/self-service-password/release-notes.html" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Release Notes" ,
"Vendor Advisory"
]
2024-11-23 15:12:23 +00:00
} ,
{
"url" : "http://packetstormsecurity.com/files/167051/ManageEngine-ADSelfService-Plus-Build-6118-NTLMv2-Hash-Exposure.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Exploit" ,
"Third Party Advisory" ,
"VDB Entry"
]
} ,
{
"url" : "https://docs.unsafe-inline.com/0day/multiple-manageengine-applications-critical-information-disclosure-vulnerability" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Exploit" ,
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://www.manageengine.com/products/self-service-password/release-notes.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Release Notes" ,
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}
