CVE-2022-29457

Summary

CVE	CVE-2022-29457
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-04-18 20:15:00 UTC
Updated	2022-09-30 13:08:00 UTC
Description	Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps.

Risk And Classification

Problem Types: CWE-522

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Zohocorp	Manageengine Adaudit Plus	All	All	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	-	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7000	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7002	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7003	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7004	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7005	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7006	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7007	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7008	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7050	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7051	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7052	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7053	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7054	All	All
Application	Zohocorp	Manageengine Adaudit Plus	7.0.0	7055	All	All
Application	Zohocorp	Manageengine Admanager Plus	All	All	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	-	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7100	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7101	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7102	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7110	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7111	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7112	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7113	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7114	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7115	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7116	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7117	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7118	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7120	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7121	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7122	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7123	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7124	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7125	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7126	All	All
Application	Zohocorp	Manageengine Admanager Plus	7.1	7130	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	All	All	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	-	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6100	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6101	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6102	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6103	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6104	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6105	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6106	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6107	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6108	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6109	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6110	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6111	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6112	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6113	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6114	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6115	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6116	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6117	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6118	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6119	All	All
Application	Zohocorp	Manageengine Adselfservice Plus	6.1	6120	All	All
Application	Zohocorp	Manageengine Exchange Reporter Plus	All	All	All	All
Application	Zohocorp	Manageengine Exchange Reporter Plus	5.7	-	All	All
Application	Zohocorp	Manageengine Exchange Reporter Plus	5.7	5700	All	All

References

Reference	Source	Link	Tags
Multiple ManageEngine Applications Critical Information Disclosure Vulnerability - UI	MISC	docs.unsafe-inline.com
ManageEngine ADSelfService Plus Build 6118 NTLMv2 Hash Exposure ≈ Packet Storm	MISC	packetstormsecurity.com
ADSelfService Plus Release Notes	MISC	www.manageengine.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.