2023-08-17 23:55:30 +00:00
{
"id" : "CVE-2023-31492" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2023-08-17T23:15:09.167" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T08:01:58.740" ,
2024-02-14 00:55:28 +00:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-08-17 23:55:30 +00:00
"descriptions" : [
{
"lang" : "en" ,
2023-08-22 23:55:35 +00:00
"value" : "Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users."
2024-02-14 00:55:28 +00:00
} ,
{
"lang" : "es" ,
"value" : "ADManager Plus versi\u00f3n 7182 y anteriores de ManageEngine de Zoho divulgaron las contrase\u00f1as predeterminadas para la restauraci\u00f3n de cuentas de dominios no autorizadas a los usuarios autenticados."
2023-08-17 23:55:30 +00:00
}
] ,
2023-08-23 20:00:33 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 6.5 ,
"baseSeverity" : "MEDIUM" ,
2023-08-23 20:00:33 +00:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-08-23 20:00:33 +00:00
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-522"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "7.1" ,
"matchCriteriaId" : "B9D72627-17F9-427E-907B-56EA0A498131"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*" ,
"matchCriteriaId" : "736740CB-A328-4163-BAC4-6C881A24C8B1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*" ,
"matchCriteriaId" : "9B806083-7309-4215-AF81-DCC4D90B7876"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*" ,
"matchCriteriaId" : "A741CDA8-D1A8-4F83-AE54-7D3D3C433825"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*" ,
"matchCriteriaId" : "09563D6F-690B-4C7A-BA25-52D009724A74"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*" ,
"matchCriteriaId" : "30FAC23B-831E-4904-AB3B-85A3C068CEB8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*" ,
"matchCriteriaId" : "9347D3CF-B5D1-4ACE-83E1-73748EF15120"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*" ,
"matchCriteriaId" : "322E0562-4586-4DF4-A935-C2447883495B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*" ,
"matchCriteriaId" : "EB9151D6-BD21-4268-9371-FF702C1AD84B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*" ,
"matchCriteriaId" : "B371E93E-7C85-42DD-AA7F-9B43D8D02963"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*" ,
"matchCriteriaId" : "094EEFA4-BD16-4F79-8133-62F9E2C8C675"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*" ,
"matchCriteriaId" : "DC5A6297-98E3-45C8-95FB-7F4E65D133BF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*" ,
"matchCriteriaId" : "93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*" ,
"matchCriteriaId" : "9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*" ,
"matchCriteriaId" : "7848B31C-AB51-486B-8655-7D7A060BAFFC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*" ,
"matchCriteriaId" : "1CFB5C4A-B717-4CC2-AE03-336C63D17B96"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*" ,
"matchCriteriaId" : "456D49D7-F04D-4003-B429-8D5504959D04"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*" ,
"matchCriteriaId" : "BB788440-904B-430E-BF5B-12ADA816477E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*" ,
"matchCriteriaId" : "876CC4D6-9546-4D39-965A-EF5A4AF4AD93"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*" ,
"matchCriteriaId" : "85432FE8-946F-448D-A92A-FF549EDC52F8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*" ,
"matchCriteriaId" : "813E1389-A949-427C-92C6-3974702FEA5D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*" ,
"matchCriteriaId" : "34A48841-EA09-4917-A6FF-DF645B581426"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*" ,
"matchCriteriaId" : "1C042646-9D36-4712-9E5D-40E55FCF7C24"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*" ,
"matchCriteriaId" : "9E6CD67A-7F5A-4F29-B563-7E4D72A1149F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*" ,
"matchCriteriaId" : "77A0C792-A8B7-48F8-9AD7-96B0CBAD4EBF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*" ,
"matchCriteriaId" : "7E53B3CB-4351-4E24-B80C-D62CC483D4D7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*" ,
"matchCriteriaId" : "0068E901-62D2-4C4D-96F8-7823B0DF7DA8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*" ,
"matchCriteriaId" : "CF70BA56-3478-4DA5-B013-4D9B820D2219"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7162:*:*:*:*:*:*" ,
"matchCriteriaId" : "28E1833F-24C8-44EC-9B66-4D832AB1C9AD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7163:*:*:*:*:*:*" ,
"matchCriteriaId" : "7DCA2AF7-8732-4095-BB6F-6F40EADD7449"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7170:*:*:*:*:*:*" ,
"matchCriteriaId" : "54247785-E55A-407D-A667-1734E7C84DF8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7171:*:*:*:*:*:*" ,
"matchCriteriaId" : "5C8887B2-D378-4A7D-B678-9B2C68953E76"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7180:*:*:*:*:*:*" ,
"matchCriteriaId" : "ADD4EAD7-275A-4467-9217-102051BE49C6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7181:*:*:*:*:*:*" ,
"matchCriteriaId" : "8181AF41-779F-4289-BECE-03C2731FDA21"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7182:*:*:*:*:*:*" ,
"matchCriteriaId" : "2BFB486E-9256-4B56-98BF-24B5A56415A2"
}
]
}
]
}
] ,
2023-08-17 23:55:30 +00:00
"references" : [
2024-02-14 00:55:28 +00:00
{
"url" : "http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html" ,
"source" : "cve@mitre.org"
} ,
2023-08-17 23:55:30 +00:00
{
"url" : "https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md" ,
2023-08-23 20:00:33 +00:00
"source" : "cve@mitre.org" ,
"tags" : [
"Exploit" ,
"Third Party Advisory"
]
2023-08-22 23:55:35 +00:00
} ,
{
"url" : "https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-31492.html" ,
2023-08-23 20:00:33 +00:00
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Exploit" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-31492.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-08-17 23:55:30 +00:00
}
]
}
