8.8
CWE
522
Advisory Published
Updated

CVE-2022-29457

First published: Mon Apr 18 2022(Updated: )

Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Zohocorp ManageEngine ADAudit Plus<7.0.0
Zohocorp ManageEngine ADAudit Plus=7.0.0
Zohocorp ManageEngine ADAudit Plus=7.0.0-7000
Zohocorp ManageEngine ADAudit Plus=7.0.0-7002
Zohocorp ManageEngine ADAudit Plus=7.0.0-7003
Zohocorp ManageEngine ADAudit Plus=7.0.0-7004
Zohocorp ManageEngine ADAudit Plus=7.0.0-7005
Zohocorp ManageEngine ADAudit Plus=7.0.0-7006
Zohocorp ManageEngine ADAudit Plus=7.0.0-7007
Zohocorp ManageEngine ADAudit Plus=7.0.0-7008
Zohocorp ManageEngine ADAudit Plus=7.0.0-7050
Zohocorp ManageEngine ADAudit Plus=7.0.0-7051
Zohocorp ManageEngine ADAudit Plus=7.0.0-7052
Zohocorp ManageEngine ADAudit Plus=7.0.0-7053
Zohocorp ManageEngine ADAudit Plus=7.0.0-7054
Zohocorp ManageEngine ADAudit Plus=7.0.0-7055
Zohocorp ManageEngine ADManager Plus<7.1
Zohocorp ManageEngine ADManager Plus=7.1
Zohocorp ManageEngine ADManager Plus=7.1-7100
Zohocorp ManageEngine ADManager Plus=7.1-7101
Zohocorp ManageEngine ADManager Plus=7.1-7102
Zohocorp ManageEngine ADManager Plus=7.1-7110
Zohocorp ManageEngine ADManager Plus=7.1-7111
Zohocorp ManageEngine ADManager Plus=7.1-7112
Zohocorp ManageEngine ADManager Plus=7.1-7113
Zohocorp ManageEngine ADManager Plus=7.1-7114
Zohocorp ManageEngine ADManager Plus=7.1-7115
Zohocorp ManageEngine ADManager Plus=7.1-7116
Zohocorp ManageEngine ADManager Plus=7.1-7117
Zohocorp ManageEngine ADManager Plus=7.1-7118
Zohocorp ManageEngine ADManager Plus=7.1-7120
Zohocorp ManageEngine ADManager Plus=7.1-7121
Zohocorp ManageEngine ADManager Plus=7.1-7122
Zohocorp ManageEngine ADManager Plus=7.1-7123
Zohocorp ManageEngine ADManager Plus=7.1-7124
Zohocorp ManageEngine ADManager Plus=7.1-7125
Zohocorp ManageEngine ADManager Plus=7.1-7126
Zohocorp ManageEngine ADManager Plus=7.1-7130
Zohocorp Manageengine Adselfservice Plus<6.1
Zohocorp Manageengine Adselfservice Plus=6.1
Zohocorp Manageengine Adselfservice Plus=6.1-6100
Zohocorp Manageengine Adselfservice Plus=6.1-6101
Zohocorp Manageengine Adselfservice Plus=6.1-6102
Zohocorp Manageengine Adselfservice Plus=6.1-6103
Zohocorp Manageengine Adselfservice Plus=6.1-6104
Zohocorp Manageengine Adselfservice Plus=6.1-6105
Zohocorp Manageengine Adselfservice Plus=6.1-6106
Zohocorp Manageengine Adselfservice Plus=6.1-6107
Zohocorp Manageengine Adselfservice Plus=6.1-6108
Zohocorp Manageengine Adselfservice Plus=6.1-6109
Zohocorp Manageengine Adselfservice Plus=6.1-6110
Zohocorp Manageengine Adselfservice Plus=6.1-6111
Zohocorp Manageengine Adselfservice Plus=6.1-6112
Zohocorp Manageengine Adselfservice Plus=6.1-6113
Zohocorp Manageengine Adselfservice Plus=6.1-6114
Zohocorp Manageengine Adselfservice Plus=6.1-6115
Zohocorp Manageengine Adselfservice Plus=6.1-6116
Zohocorp Manageengine Adselfservice Plus=6.1-6117
Zohocorp Manageengine Adselfservice Plus=6.1-6118
Zohocorp Manageengine Adselfservice Plus=6.1-6119
Zohocorp Manageengine Adselfservice Plus=6.1-6120
Zohocorp ManageEngine Exchange Reporter Plus<5.7
Zohocorp ManageEngine Exchange Reporter Plus=5.7
Zohocorp ManageEngine Exchange Reporter Plus=5.7-5700

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203