vulnerability

Zoho ManageEngine Password Manager Pro: CVE-2022-35405: Remote Code Execution

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
07/19/2022
Added
01/20/2023
Modified
03/03/2023

Description


This remote code execution vulnerability could allow remote attackers to execute arbitrary code on affected installations of Password Manager Pro, PAM360 and Access Manager Plus. Authentication is not required to exploit this vulnerability in Password Manager Pro and PAM360 products.

Solution

zoho-manageengine-password-manager-pro-upgrade-12101
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.