CVE-2022-43671 In Zoho ManageEngine Password Manager Pro, PAM360, and Access Manager Plus before 4306, SQL Injection is possible.
Accessing the password database using the password reset functionality may allow an attacker to gain access to the system or account. A remote attacker may be able to gain access to the system if the Access Manager Pro or Access Manager Plus component of ManageEngine Software is installed on the server. A remote attacker may be able to gain access to the system if the PAM360 component of ManageEngine Software is installed on the server. A remote attacker may be able to gain access to the system if the Zoho ManageEngine Software is installed on the server. Accessing the password database using the password change functionality may allow an attacker to gain access to the system or account. A remote attacker may be able to gain access to the system if the Access Manager Pro or Access Manager Plus component of ManageEngine Software is installed on the server. A remote attacker may be able to gain access to the system if the PAM360 component of ManageEngine Software is installed on the server. A remote attacker may be able to gain access to the system if the Zoho ManageEngine Software is installed on the server. This issue can be exploited remotely. An attacker must be able to access the system remotely to exploit this vulnerability. This issue can be exploited via the web application, without user interaction
References: https://www.symantec.com/security_response/writeup.jsp?docid=2008-102790
https://www.symantec.com/security_response/writeup.jsp?docid=2014-102830
The importance of digital marketing: 6 reasons why digital marketing is important
Vulnerable Software
ManageEngine Access Manager Pro, ManageEngine Access Manager Plus, ManageEngine PAM360, Zoho ManageEngine Software
The importance of digital marketing is a popular topic for many companies. In this blog post, we explore six reasons why digital marketing is important. Whether you're just starting out or already have a company with multiple locations across the world, it's important to know how to effectively market your business digitally. With so many options available to brands and companies these days, it can be difficult for them to know what kind of marketing strategy is best for their brand. But by knowing what type of marketing strategy will work best for your brand, you'll save time and money!
Products Affected By This Advisory
ManageEngine Access Manager Pro
ManageEngine Access Manager Plus
Zoho ManageEngine Software
PAM360
ManageEngine ZCM Suite (for ManageEngine Zoho ManageEngine Software)
This advisory is not applicable to the following products: ManageEngine ZCM Suite (for Microsoft Windows) and Managesoft Citrix MetaFrame(TM) Solutions
Timeline
Published on: 11/12/2022 04:15:00 UTC
Last modified on: 11/16/2022 18:07:00 UTC