CVE-2024-5546

Published: Aug 28, 2024Modified: Sep 19, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

Affected (226)

Products: Zohocorp: Manageengine Pam360, Manageengine Password Manager Pro

Zohocorp

2 products

Manageengine Pam360

Manageengine Password Manager Pro

Configuration A

68 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Pam360	Version 4.0
Zohocorp Manageengine Pam360	Version 4.0 build4001
Zohocorp Manageengine Pam360	Version 4.0 build4002
Zohocorp Manageengine Pam360	Version 4.1
Zohocorp Manageengine Pam360	Version 4.1 build4100
Zohocorp Manageengine Pam360	Version 4.1 build4101
Zohocorp Manageengine Pam360	Version 4.5
Zohocorp Manageengine Pam360	Version 4.5 build4500
Zohocorp Manageengine Pam360	Version 4.5 build4501
Zohocorp Manageengine Pam360	Version 5.0
Zohocorp Manageengine Pam360	Version 5.0 build5000
Zohocorp Manageengine Pam360	Version 5.0 build5001
Zohocorp Manageengine Pam360	Version 5.0 build5002
Zohocorp Manageengine Pam360	Version 5.0 build5003
Zohocorp Manageengine Pam360	Version 5.0 build5004
Zohocorp Manageengine Pam360	Version 5.1
Zohocorp Manageengine Pam360	Version 5.1 build5100
Zohocorp Manageengine Pam360	Version 5.2
Zohocorp Manageengine Pam360	Version 5.2 build5200
Zohocorp Manageengine Pam360	Version 5.3
Zohocorp Manageengine Pam360	Version 5.3 build5300
Zohocorp Manageengine Pam360	Version 5.3 build5301
Zohocorp Manageengine Pam360	Version 5.3 build5302
Zohocorp Manageengine Pam360	Version 5.3 build5303
Zohocorp Manageengine Pam360	Version 5.3 build5304
Zohocorp Manageengine Pam360	Version 5.3 build5305
Zohocorp Manageengine Pam360	Version 5.3 build5306
Zohocorp Manageengine Pam360	Version 5.4 build5400
Zohocorp Manageengine Pam360	Version 5.4 build5401
Zohocorp Manageengine Pam360	Version 5.5 build5500
Zohocorp Manageengine Pam360	Version 5.5 build5510
Zohocorp Manageengine Pam360	Version 5.5 build5520
Zohocorp Manageengine Pam360	Version 5.5 build5550
Zohocorp Manageengine Pam360	Version 5.7 build5700
Zohocorp Manageengine Pam360	Version 5.7 build5710
Zohocorp Manageengine Pam360	Version 5.7 build5711
Zohocorp Manageengine Pam360	Version 5.7 build5712
Zohocorp Manageengine Pam360	Version 5.7 build5713
Zohocorp Manageengine Pam360	Version 5.8 build5800
Zohocorp Manageengine Pam360	Version 5.8 build5801
Zohocorp Manageengine Pam360	Version 5.8 build5810
Zohocorp Manageengine Pam360	Version 5.9 build5900
Zohocorp Manageengine Pam360	Version 5.9 build5950
Zohocorp Manageengine Pam360	Version 5.9 build5951
Zohocorp Manageengine Pam360	Version 6.0 build6000
Zohocorp Manageengine Pam360	Version 6.0 build6010
Zohocorp Manageengine Pam360	Version 6.0 build6011
Zohocorp Manageengine Pam360	Version 6.1 build6100
Zohocorp Manageengine Pam360	Version 6.2 build6200
Zohocorp Manageengine Pam360	Version 6.2 build6210
Zohocorp Manageengine Pam360	Version 6.3 build6300
Zohocorp Manageengine Pam360	Version 6.3 build6310
Zohocorp Manageengine Pam360	Version 6.3 build6320
Zohocorp Manageengine Pam360	Version 6.4 build6400
Zohocorp Manageengine Pam360	Version 6.5 build6500
Zohocorp Manageengine Pam360	Version 6.5 build6501
Zohocorp Manageengine Pam360	Version 6.5 build6510
Zohocorp Manageengine Pam360	Version 6.5 build6520
Zohocorp Manageengine Pam360	Version 6.5 build6530
Zohocorp Manageengine Pam360	Version 6.5 build6540
Zohocorp Manageengine Pam360	Version 6.5 build6541
Zohocorp Manageengine Pam360	Version 6.6 build6600
Zohocorp Manageengine Pam360	Version 6.6 build6601
Zohocorp Manageengine Pam360	Version 6.6 build6610
Zohocorp Manageengine Pam360	Version 6.6 build6611
Zohocorp Manageengine Pam360	Version 6.7 build6700
Zohocorp Manageengine Pam360	Version 6.7 build6710
Zohocorp Manageengine Pam360	Version 7.0 build7000

Configuration B

158 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Password Manager Pro	Version 10.0 build10000
Zohocorp Manageengine Password Manager Pro	Version 10.0 build10001
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10100
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10101
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10102
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10103
Zohocorp Manageengine Password Manager Pro	Version 10.1 build10104
Zohocorp Manageengine Password Manager Pro	Version 10.2 build10200
Zohocorp Manageengine Password Manager Pro	Version 10.3 build10300
Zohocorp Manageengine Password Manager Pro	Version 10.3 build10301
Zohocorp Manageengine Password Manager Pro	Version 10.3 build10302
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10400
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10401
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10402
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10403
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10404
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10405
Zohocorp Manageengine Password Manager Pro	Version 10.4 build10406
Zohocorp Manageengine Password Manager Pro	Version 10.5 build10500
Zohocorp Manageengine Password Manager Pro	Version 10.5 build10501
Zohocorp Manageengine Password Manager Pro	Version 11.0 build11000
Zohocorp Manageengine Password Manager Pro	Version 11.0 build11001
Zohocorp Manageengine Password Manager Pro	Version 11.0 build11002
Zohocorp Manageengine Password Manager Pro	Version 11.0 build11003
Zohocorp Manageengine Password Manager Pro	Version 11.0 build11004
Zohocorp Manageengine Password Manager Pro	Version 11.1 build11100
Zohocorp Manageengine Password Manager Pro	Version 11.1 build11101
Zohocorp Manageengine Password Manager Pro	Version 11.1 build11102
Zohocorp Manageengine Password Manager Pro	Version 11.1 build11103
Zohocorp Manageengine Password Manager Pro	Version 11.1 build11104
Zohocorp Manageengine Password Manager Pro	Version 11.2 build11200
Zohocorp Manageengine Password Manager Pro	Version 11.2 build11201
Zohocorp Manageengine Password Manager Pro	Version 11.3 build11300
Zohocorp Manageengine Password Manager Pro	Version 11.3 build11301
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12000
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12001
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12002
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12003
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12004
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12005
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12006
Zohocorp Manageengine Password Manager Pro	Version 12.0 build12007
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12100
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12101
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12110
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12120
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12121
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12122
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12123
Zohocorp Manageengine Password Manager Pro	Version 12.1 build12124
Zohocorp Manageengine Password Manager Pro	Version 12.2 build12200
Zohocorp Manageengine Password Manager Pro	Version 12.2 build12210
Zohocorp Manageengine Password Manager Pro	Version 12.2 build12211
Zohocorp Manageengine Password Manager Pro	Version 12.2 build12220
Zohocorp Manageengine Password Manager Pro	Version 12.2 build12230
Zohocorp Manageengine Password Manager Pro	Version 12.3 build12300
Zohocorp Manageengine Password Manager Pro	Version 12.3 build12310
Zohocorp Manageengine Password Manager Pro	Version 12.3 build12320
Zohocorp Manageengine Password Manager Pro	Version 12.3 build12330
Zohocorp Manageengine Password Manager Pro	Version 12.3 build12340
Zohocorp Manageengine Password Manager Pro	Version 12.3 build12350
Zohocorp Manageengine Password Manager Pro	Version 12.4 build12400
Zohocorp Manageengine Password Manager Pro	Version 12.4 build12401
Zohocorp Manageengine Password Manager Pro	Version 12.4 build12410
Zohocorp Manageengine Password Manager Pro	Version 12.4 build12420
Zohocorp Manageengine Password Manager Pro	Version 12.4 build12430
Zohocorp Manageengine Password Manager Pro	Version 12.4 build12431
Zohocorp Manageengine Password Manager Pro	Version 6.0 build6002
Zohocorp Manageengine Password Manager Pro	Version 6.1 build6104
Zohocorp Manageengine Password Manager Pro	Version 6.2 build6201
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6401
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6402
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6403
Zohocorp Manageengine Password Manager Pro	Version 6.4 build6404
Zohocorp Manageengine Password Manager Pro	Version 6.5 build6503
Zohocorp Manageengine Password Manager Pro	Version 6.5 build6504
Zohocorp Manageengine Password Manager Pro	Version 6.5 build6505
Zohocorp Manageengine Password Manager Pro	Version 6.6 build6600
Zohocorp Manageengine Password Manager Pro	Version 6.7 build6700
Zohocorp Manageengine Password Manager Pro	Version 6.7 build6701
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6800
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6801
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6802
Zohocorp Manageengine Password Manager Pro	Version 6.8 build6803
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6900
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6901
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6902
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6903
Zohocorp Manageengine Password Manager Pro	Version 6.9 build6904
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7000
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7001
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7002
Zohocorp Manageengine Password Manager Pro	Version 7.0 build7003
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7100
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7101
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7102
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7103
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7104
Zohocorp Manageengine Password Manager Pro	Version 7.1 build7105
Zohocorp Manageengine Password Manager Pro	Version 7.5 build7500
Zohocorp Manageengine Password Manager Pro	Version 7.5 build7501
Zohocorp Manageengine Password Manager Pro	Version 7.6 build7600
Zohocorp Manageengine Password Manager Pro	Version 8.0 build8000
Zohocorp Manageengine Password Manager Pro	Version 8.0 build8001
Zohocorp Manageengine Password Manager Pro	Version 8.1 build8100
Zohocorp Manageengine Password Manager Pro	Version 8.1 build8101
Zohocorp Manageengine Password Manager Pro	Version 8.1 build8102
Zohocorp Manageengine Password Manager Pro	Version 8.2 build8200
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8300
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8301
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8302
Zohocorp Manageengine Password Manager Pro	Version 8.3 build8303
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8041
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8400
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8402
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8403
Zohocorp Manageengine Password Manager Pro	Version 8.4 build8404
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8500
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8501
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8502
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8503
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8504
Zohocorp Manageengine Password Manager Pro	Version 8.5 build8505
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8600
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8601
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8602
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8603
Zohocorp Manageengine Password Manager Pro	Version 8.6 build8604
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8700
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8701
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8702
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8703
Zohocorp Manageengine Password Manager Pro	Version 8.7 build8704
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9000
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9001
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9002
Zohocorp Manageengine Password Manager Pro	Version 9.0 build9003
Zohocorp Manageengine Password Manager Pro	Version 9.1 build9100
Zohocorp Manageengine Password Manager Pro	Version 9.1 build9101
Zohocorp Manageengine Password Manager Pro	Version 9.2 build9200
Zohocorp Manageengine Password Manager Pro	Version 9.3 build9300
Zohocorp Manageengine Password Manager Pro	Version 9.4 build9400
Zohocorp Manageengine Password Manager Pro	Version 9.4 build9401
Zohocorp Manageengine Password Manager Pro	Version 9.4 build9402
Zohocorp Manageengine Password Manager Pro	Version 9.5 build9500
Zohocorp Manageengine Password Manager Pro	Version 9.5 build9501
Zohocorp Manageengine Password Manager Pro	Version 9.5 build9502
Zohocorp Manageengine Password Manager Pro	Version 9.6 build9600
Zohocorp Manageengine Password Manager Pro	Version 9.6 build9601
Zohocorp Manageengine Password Manager Pro	Version 9.7 build9700
Zohocorp Manageengine Password Manager Pro	Version 9.7 build9701
Zohocorp Manageengine Password Manager Pro	Version 9.7 build9702
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9800
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9801
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9802
Zohocorp Manageengine Password Manager Pro	Version 9.8 build9803
Zohocorp Manageengine Password Manager Pro	Version 9.9 build9900
Zohocorp Manageengine Password Manager Pro	Version 9.9 build9901

Related CWEs

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

References (1)

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2024-5546.html

Source: 0fc0942c-577d-436f-ae8e-945763c79b02

Vendor Advisory

Timeline

No history available yet.