CVE-2025-11670: NTLM Hash Exposure Vulnerability
Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Zohocorp ManageEngine ADManager Plusto a version that resolves this vulnerability.Fixed in 8025
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11670?
CVE-2025-11670 is considered a high-severity vulnerability due to the potential for NTLM hash exposure.
Who is affected by CVE-2025-11670?
CVE-2025-11670 affects Zohocorp ManageEngine ADManager Plus versions prior to 8025.
How can I fix CVE-2025-11670?
To fix CVE-2025-11670, upgrade to Zohocorp ManageEngine ADManager Plus version 8025 or later.
What type of exploitation is possible with CVE-2025-11670?
CVE-2025-11670 can be exploited by technicians who have the 'Impersonate as Admin' option enabled.
What does CVE-2025-11670 expose?
CVE-2025-11670 exposes NTLM hashes, which can lead to unauthorized access if exploited.