CVE-2022-43671 In Zoho ManageEngine Password Manager Pro, PAM360, and Access Manager Plus before 4306, SQL Injection is possible.

CVE-2022-43671 In Zoho ManageEngine Password Manager Pro, PAM360, and Access Manager Plus before 4306, SQL Injection is possible.

Accessing the password database using the password reset functionality may allow an attacker to gain access to the system or account. A remote attacker may be able to gain access to the system if the Access Manager Pro or Access Manager Plus component of ManageEngine Software is installed on the server. A remote attacker may be able to gain access to the system if the PAM360 component of ManageEngine Software is installed on the server. A remote attacker may be able to gain access to the system if the Zoho ManageEngine Software is installed on the server. Accessing the password database using the password change functionality may allow an attacker to gain access to the system or account. A remote attacker may be able to gain access to the system if the Access Manager Pro or Access Manager Plus component of ManageEngine Software is installed on the server. A remote attacker may be able to gain access to the system if the PAM360 component of ManageEngine Software is installed on the server. A remote attacker may be able to gain access to the system if the Zoho ManageEngine Software is installed on the server. This issue can be exploited remotely. An attacker must be able to access the system remotely to exploit this vulnerability. This issue can be exploited via the web application, without user interaction

References: https://www.symantec.com/security_response/writeup.jsp?docid=2008-102790

https://www.symantec.com/security_response/writeup.jsp?docid=2014-102830

The importance of digital marketing: 6 reasons why digital marketing is important

Vulnerable Software

ManageEngine Access Manager Pro, ManageEngine Access Manager Plus, ManageEngine PAM360, Zoho ManageEngine Software

The importance of digital marketing is a popular topic for many companies. In this blog post, we explore six reasons why digital marketing is important.    Whether you're just starting out or already have a company with multiple locations across the world, it's important to know how to effectively market your business digitally. With so many options available to brands and companies these days, it can be difficult for them to know what kind of marketing strategy is best for their brand. But by knowing what type of marketing strategy will work best for your brand, you'll save time and money!

Products Affected By This Advisory

ManageEngine Access Manager Pro
ManageEngine Access Manager Plus
Zoho ManageEngine Software
PAM360
ManageEngine ZCM Suite (for ManageEngine Zoho ManageEngine Software)
This advisory is not applicable to the following products: ManageEngine ZCM Suite (for Microsoft Windows) and Managesoft Citrix MetaFrame(TM) Solutions

References

Subscribe to CVE.news
Don’t miss out on the latest issues. Sign up now to get access to the library of members-only issues.
jamie@example.com
Subscribe