CVE-2022-29457
ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps.
Zoho ManageEngine ADSelfService Plus versiones anteriores a 6121, ADAuditPlus versión 7060, Exchange Reporter Plus versión 5701, y ADManagerPlus versión 7131, permiten una divulgación de NTLM Hash durante determinados pasos de configuración de la ruta de almacenamiento
ManageEngine ADSelfService Plus build 6118 suffers from an NTLMv2 hash exposure vulnerability.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-04-18 CVE Reserved
- 2022-04-18 CVE Published
- 2022-05-11 First Exploit
- 2024-08-03 CVE Updated
- 2024-09-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-522: Insufficiently Protected Credentials
CAPEC
References (4)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.manageengine.com/products/self-service-password/release-notes.html | 2022-09-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | < 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version " < 7.0.0" | - |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | - |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7000 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7002 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7003 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7004 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7005 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7006 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7007 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7008 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7050 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7051 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7052 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7053 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7054 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adaudit Plus Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" | 7.0.0 Search vendor "Zohocorp" for product "Manageengine Adaudit Plus" and version "7.0.0" | 7055 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | < 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version " < 7.1" | - |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | - |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7100 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7101 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7102 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7110 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7111 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7112 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7113 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7114 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7115 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7116 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7117 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7118 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7120 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7121 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7122 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7123 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7124 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7125 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7126 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Admanager Plus Search vendor "Zohocorp" for product "Manageengine Admanager Plus" | 7.1 Search vendor "Zohocorp" for product "Manageengine Admanager Plus" and version "7.1" | 7130 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | < 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version " < 6.1" | - |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | - |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6100 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6101 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6102 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6103 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6104 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6105 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6106 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6107 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6108 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6109 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6110 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6111 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6112 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6113 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6114 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6115 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6116 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6117 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6118 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6119 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Adselfservice Plus Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" | 6.1 Search vendor "Zohocorp" for product "Manageengine Adselfservice Plus" and version "6.1" | 6120 |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Exchange Reporter Plus Search vendor "Zohocorp" for product "Manageengine Exchange Reporter Plus" | < 5.7 Search vendor "Zohocorp" for product "Manageengine Exchange Reporter Plus" and version " < 5.7" | - |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Exchange Reporter Plus Search vendor "Zohocorp" for product "Manageengine Exchange Reporter Plus" | 5.7 Search vendor "Zohocorp" for product "Manageengine Exchange Reporter Plus" and version "5.7" | - |
Affected
| ||||||
| Zohocorp Search vendor "Zohocorp" | Manageengine Exchange Reporter Plus Search vendor "Zohocorp" for product "Manageengine Exchange Reporter Plus" | 5.7 Search vendor "Zohocorp" for product "Manageengine Exchange Reporter Plus" and version "5.7" | 5700 |
Affected
| ||||||