CVE-2023-31492: Medium severity zoho corporation admanager plus vulnerability
Published Aug 17, 2023
·Updated
Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.
Affected Software
36 affected components
ZohoCorp ManageEngine ADManager Plus<7.1
ZohoCorp ManageEngine ADManager Plus=7.1
ZohoCorp ManageEngine ADManager Plus=7.1-7100
ZohoCorp ManageEngine ADManager Plus=7.1-7101
ZohoCorp ManageEngine ADManager Plus=7.1-7102
ZohoCorp ManageEngine ADManager Plus=7.1-7110
ZohoCorp ManageEngine ADManager Plus=7.1-7111
ZohoCorp ManageEngine ADManager Plus=7.1-7112
ZohoCorp ManageEngine ADManager Plus=7.1-7113
ZohoCorp ManageEngine ADManager Plus=7.1-7114
ZohoCorp ManageEngine ADManager Plus=7.1-7115
ZohoCorp ManageEngine ADManager Plus=7.1-7116
ZohoCorp ManageEngine ADManager Plus=7.1-7117
ZohoCorp ManageEngine ADManager Plus=7.1-7118
ZohoCorp ManageEngine ADManager Plus=7.1-7120
ZohoCorp ManageEngine ADManager Plus=7.1-7121
ZohoCorp ManageEngine ADManager Plus=7.1-7122
ZohoCorp ManageEngine ADManager Plus=7.1-7123
ZohoCorp ManageEngine ADManager Plus=7.1-7124
ZohoCorp ManageEngine ADManager Plus=7.1-7125
ZohoCorp ManageEngine ADManager Plus=7.1-7126
ZohoCorp ManageEngine ADManager Plus=7.1-7130
ZohoCorp ManageEngine ADManager Plus=7.1-7131
ZohoCorp ManageEngine ADManager Plus=7.1-7140
ZohoCorp ManageEngine ADManager Plus=7.1-7141
ZohoCorp ManageEngine ADManager Plus=7.1-7150
ZohoCorp ManageEngine ADManager Plus=7.1-7151
ZohoCorp ManageEngine ADManager Plus=7.1-7160
ZohoCorp ManageEngine ADManager Plus=7.1-7161
ZohoCorp ManageEngine ADManager Plus=7.1-7162
ZohoCorp ManageEngine ADManager Plus=7.1-7163
ZohoCorp ManageEngine ADManager Plus=7.1-7170
ZohoCorp ManageEngine ADManager Plus=7.1-7171
ZohoCorp ManageEngine ADManager Plus=7.1-7180
ZohoCorp ManageEngine ADManager Plus=7.1-7181
ZohoCorp ManageEngine ADManager Plus=7.1-7182
Event History
Aug 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2023-31492.
2
What is the severity of CVE-2023-31492?
The severity of CVE-2023-31492 is medium (6.5).
3
Which software versions are affected by CVE-2023-31492?
Zoho ManageEngine ADManager Plus version 7.1-7182 and prior are affected by CVE-2023-31492.
4
How can I fix CVE-2023-31492?
To fix CVE-2023-31492, it is recommended to upgrade Zoho ManageEngine ADManager Plus to a version higher than 7.1-7182.
5
Where can I find more information about CVE-2023-31492?
More information about CVE-2023-31492 can be found on the GitHub repository and the official ManageEngine website.