CVE-2022-26653: Medium severity zoho manageengine remote access plus vulnerability
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-26653?
CVE-2022-26653 is a vulnerability in Zoho ManageEngine Remote Access Plus that allows guest users to view domain details.
What is the severity of CVE-2022-26653?
The severity of CVE-2022-26653 is medium with a CVSS score of 5.3.
How can guest users exploit CVE-2022-26653?
Guest users can exploit CVE-2022-26653 to view domain details, such as the username and GUID of an administrator.
How can I fix CVE-2022-26653?
To fix CVE-2022-26653, it is recommended to update Zoho ManageEngine Remote Access Plus to version 10.1.2137.15 or later.
Where can I find more information about CVE-2022-26653?
You can find more information about CVE-2022-26653 at the following references: [link1](https://raxis.com/blog/cve-2022-26653-and-cve-2022-26777), [link2](https://www.manageengine.com/remote-desktop-management/advisory/cve-2022-26653.html)