CVE-2007-2429: Critical severity ManageEngine PasswordManager Pro vulnerability
ManageEngine PasswordManager Pro (PMP) allows remote attackers to obtain administrative access to a database by injecting a certain command line for the mysql program, as demonstrated by the "-port 2345" and "-u root" arguments. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2429?
CVE-2007-2429 is considered a critical vulnerability that allows remote attackers to gain administrative access to the database.
How do I fix CVE-2007-2429?
To fix CVE-2007-2429, it is recommended to update to the latest version of ManageEngine PasswordManager Pro that addresses this vulnerability.
Which versions of ManageEngine PasswordManager Pro are affected by CVE-2007-2429?
All versions of ManageEngine PasswordManager Pro are potentially affected by CVE-2007-2429.
Can CVE-2007-2429 be exploited remotely?
Yes, CVE-2007-2429 can be exploited remotely by attackers if the affected software is not properly secured.
What type of attack is associated with CVE-2007-2429?
CVE-2007-2429 is associated with a command injection attack that targets the MySQL command line used by ManageEngine PasswordManager Pro.