CVE-2022-26777: Medium severity zoho manageengine remote access plus vulnerability
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-26777?
CVE-2022-26777 is a vulnerability in Zoho ManageEngine Remote Access Plus before version 10.1.2137.15 that allows guest users to view license details.
How can guest users exploit CVE-2022-26777?
Guest users can exploit CVE-2022-26777 by gaining unauthorized access to view license details in Zoho ManageEngine Remote Access Plus.
What is the severity of CVE-2022-26777?
The severity of CVE-2022-26777 is medium, with a CVSS score of 5.3.
How do I fix CVE-2022-26777?
To fix CVE-2022-26777, update Zoho ManageEngine Remote Access Plus to version 10.1.2137.15 or later.
Where can I find more information about CVE-2022-26777?
You can find more information about CVE-2022-26777 in the following references: [Reference 1](https://raxis.com/blog/cve-2022-26653-and-cve-2022-26777) and [Reference 2](https://www.manageengine.com/remote-desktop-management/advisory/cve-2022-26777.html).