← Back

CVE-2022-29457

nvd nist
Published: Apr 18, 2022Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps.

Affected (64)

4 products
Manageengine Adaudit Plus
Manageengine Admanager Plus
Manageengine Adselfservice Plus
Configuration A
64 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Before 7.0.0
Version 7.0.0
Version 7.0.0 7000
Version 7.0.0 7002
Version 7.0.0 7003
Version 7.0.0 7004
Version 7.0.0 7005
Version 7.0.0 7006
Version 7.0.0 7007
Version 7.0.0 7008
Version 7.0.0 7050
Version 7.0.0 7051
Version 7.0.0 7052
Version 7.0.0 7053
Version 7.0.0 7054
Version 7.0.0 7055
Zohocorp
Before 7.1
Version 7.1
Version 7.1 7100
Version 7.1 7101
Version 7.1 7102
Version 7.1 7110
Version 7.1 7111
Version 7.1 7112
Version 7.1 7113
Version 7.1 7114
Version 7.1 7115
Version 7.1 7116
Version 7.1 7117
Version 7.1 7118
Version 7.1 7120
Version 7.1 7121
Version 7.1 7122
Version 7.1 7123
Version 7.1 7124
Version 7.1 7125
Version 7.1 7126
Version 7.1 7130
Zohocorp
Before 6.1
Version 6.1
Version 6.1 6100
Version 6.1 6101
Version 6.1 6102
Version 6.1 6103
Version 6.1 6104
Version 6.1 6105
Version 6.1 6106
Version 6.1 6107
Version 6.1 6108
Version 6.1 6109
Version 6.1 6110
Version 6.1 6111
Version 6.1 6112
Version 6.1 6113
Version 6.1 6114
Version 6.1 6115
Version 6.1 6116
Version 6.1 6117
Version 6.1 6118
Version 6.1 6119
Version 6.1 6120
Zohocorp
Before 5.7
Version 5.7
Version 5.7 5700

Timeline

No history available yet.