CVE-2022-24306

nvd nist

Published: Mar 2, 2022Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.

Affected (75)

Products: Zohocorp: Manageengine Sharepoint Manager Plus

Zohocorp

1 product

Manageengine Sharepoint Manager Plus

Configuration A

75 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions
Zohocorp Manageengine Sharepoint Manager Plus	All versions

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329

Source: cve@mitre.org

Release NotesVendor Advisory

https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.