vulnerability
Zoho ManageEngine Password Manager Pro: CVE-2022-35405: Remote Code Execution
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | 07/19/2022 | 01/20/2023 | 03/03/2023 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
07/19/2022
Added
01/20/2023
Modified
03/03/2023
Description
This remote code execution vulnerability could allow remote attackers to execute arbitrary code on affected installations of Password Manager Pro, PAM360 and Access Manager Plus. Authentication is not required to exploit this vulnerability in Password Manager Pro and PAM360 products.
Solution
zoho-manageengine-password-manager-pro-upgrade-12101

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.