CVE-2022-24306: Critical severity manageengine sharepoint manager plus vulnerability

Published Mar 2, 2022
·
Updated

Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.

Affected Software

75 affected components
ZohoCorp ManageEngine SharePoint Manager Plus=build_4000
ZohoCorp ManageEngine SharePoint Manager Plus=build_4001
ZohoCorp ManageEngine SharePoint Manager Plus=build_4002
ZohoCorp ManageEngine SharePoint Manager Plus=build_4003
ZohoCorp ManageEngine SharePoint Manager Plus=build_4004
ZohoCorp ManageEngine SharePoint Manager Plus=build_4005
ZohoCorp ManageEngine SharePoint Manager Plus=build_4006
ZohoCorp ManageEngine SharePoint Manager Plus=build_4007
ZohoCorp ManageEngine SharePoint Manager Plus=build_4008
ZohoCorp ManageEngine SharePoint Manager Plus=build_4009
ZohoCorp ManageEngine SharePoint Manager Plus=build_4010
ZohoCorp ManageEngine SharePoint Manager Plus=build_4011
ZohoCorp ManageEngine SharePoint Manager Plus=build_4012
ZohoCorp ManageEngine SharePoint Manager Plus=build_4013
ZohoCorp ManageEngine SharePoint Manager Plus=build_4014
ZohoCorp ManageEngine SharePoint Manager Plus=build_4015
ZohoCorp ManageEngine SharePoint Manager Plus=build_4016
ZohoCorp ManageEngine SharePoint Manager Plus=build_4017
ZohoCorp ManageEngine SharePoint Manager Plus=build_4018
ZohoCorp ManageEngine SharePoint Manager Plus=build_4020
ZohoCorp ManageEngine SharePoint Manager Plus=build_4021
ZohoCorp ManageEngine SharePoint Manager Plus=build_4022
ZohoCorp ManageEngine SharePoint Manager Plus=build_4023
ZohoCorp ManageEngine SharePoint Manager Plus=build_4024
ZohoCorp ManageEngine SharePoint Manager Plus=build_4025
ZohoCorp ManageEngine SharePoint Manager Plus=build_4026
ZohoCorp ManageEngine SharePoint Manager Plus=build_4027
ZohoCorp ManageEngine SharePoint Manager Plus=build_4028
ZohoCorp ManageEngine SharePoint Manager Plus=build_4029
ZohoCorp ManageEngine SharePoint Manager Plus=build_4030
ZohoCorp ManageEngine SharePoint Manager Plus=build_4031
ZohoCorp ManageEngine SharePoint Manager Plus=build_4032
ZohoCorp ManageEngine SharePoint Manager Plus=build_4033
ZohoCorp ManageEngine SharePoint Manager Plus=build_4100
ZohoCorp ManageEngine SharePoint Manager Plus=build_4101
ZohoCorp ManageEngine SharePoint Manager Plus=build_4102
ZohoCorp ManageEngine SharePoint Manager Plus=build_4103
ZohoCorp ManageEngine SharePoint Manager Plus=build_4104
ZohoCorp ManageEngine SharePoint Manager Plus=build_4105
ZohoCorp ManageEngine SharePoint Manager Plus=build_4106
ZohoCorp ManageEngine SharePoint Manager Plus=build_4107
ZohoCorp ManageEngine SharePoint Manager Plus=build_4108
ZohoCorp ManageEngine SharePoint Manager Plus=build_4109
ZohoCorp ManageEngine SharePoint Manager Plus=build_4110
ZohoCorp ManageEngine SharePoint Manager Plus=build_4200
ZohoCorp ManageEngine SharePoint Manager Plus=build_4201
ZohoCorp ManageEngine SharePoint Manager Plus=build_4300
ZohoCorp ManageEngine SharePoint Manager Plus=build_4301
ZohoCorp ManageEngine SharePoint Manager Plus=build_4302
ZohoCorp ManageEngine SharePoint Manager Plus=build_4303
ZohoCorp ManageEngine SharePoint Manager Plus=build_4304
ZohoCorp ManageEngine SharePoint Manager Plus=build_4305
ZohoCorp ManageEngine SharePoint Manager Plus=build_4306
ZohoCorp ManageEngine SharePoint Manager Plus=build_4307
ZohoCorp ManageEngine SharePoint Manager Plus=build_4308
ZohoCorp ManageEngine SharePoint Manager Plus=build_4309
ZohoCorp ManageEngine SharePoint Manager Plus=build_4310
ZohoCorp ManageEngine SharePoint Manager Plus=build_4311
ZohoCorp ManageEngine SharePoint Manager Plus=build_4312
ZohoCorp ManageEngine SharePoint Manager Plus=build_4313
ZohoCorp ManageEngine SharePoint Manager Plus=build_4314
ZohoCorp ManageEngine SharePoint Manager Plus=build_4315
ZohoCorp ManageEngine SharePoint Manager Plus=build_4316
ZohoCorp ManageEngine SharePoint Manager Plus=build_4317
ZohoCorp ManageEngine SharePoint Manager Plus=build_4318
ZohoCorp ManageEngine SharePoint Manager Plus=build_4319
ZohoCorp ManageEngine SharePoint Manager Plus=build_4320
ZohoCorp ManageEngine SharePoint Manager Plus=build_4321
ZohoCorp ManageEngine SharePoint Manager Plus=build_4322
ZohoCorp ManageEngine SharePoint Manager Plus=build_4323
ZohoCorp ManageEngine SharePoint Manager Plus=build_4324
ZohoCorp ManageEngine SharePoint Manager Plus=build_4325
ZohoCorp ManageEngine SharePoint Manager Plus=build_4326
ZohoCorp ManageEngine SharePoint Manager Plus=build_4327
ZohoCorp ManageEngine SharePoint Manager Plus=build_4328

Event History

Mar 2, 2022
CVE Published
via MITRE·02:34 PM
Data Sourced
via MITRE·02:34 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-24306?

CVE-2022-24306 has a severity rating of high due to the potential for account takeover.

2

How do I fix CVE-2022-24306?

To fix CVE-2022-24306, you should upgrade to version 4329 or later of Zoho ManageEngine SharePoint Manager Plus.

3

Which versions are affected by CVE-2022-24306?

CVE-2022-24306 affects all versions of Zoho ManageEngine SharePoint Manager Plus prior to build 4329.

4

What impact does CVE-2022-24306 have on security?

CVE-2022-24306 can allow unauthorized users to gain access to accounts, compromising sensitive data.

5

Is there a patch available for CVE-2022-24306?

Yes, a patch for CVE-2022-24306 is available in the release version 4329 and later.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203