CVE-2023-31492: zohocorp manageengine admanager plus

csirt@kutim:~/threat-intel/cve/CVE-2023-31492

CVSS 6.5 · Medium EPSS 7,9%

Kerentanan Insufficiently Protected Credentials pada zohocorp manageengine admanager plus. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.

Rincian

Terbit di NVD: 17 Agustus 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-522: Insufficiently Protected Credentials
EPSS (30 hari): 7,9% peluang dieksploitasi; lebih tinggi dari 94,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
zohocorp	manageengine admanager plus	Semua versi sebelum 7.1
zohocorp	manageengine admanager plus	Versi 7.1
zohocorp	manageengine admanager plus	Versi 7.1 7100
zohocorp	manageengine admanager plus	Versi 7.1 7101
zohocorp	manageengine admanager plus	Versi 7.1 7102
zohocorp	manageengine admanager plus	Versi 7.1 7110
zohocorp	manageengine admanager plus	Versi 7.1 7111
zohocorp	manageengine admanager plus	Versi 7.1 7112
zohocorp	manageengine admanager plus	Versi 7.1 7113
zohocorp	manageengine admanager plus	Versi 7.1 7114
zohocorp	manageengine admanager plus	Versi 7.1 7115
zohocorp	manageengine admanager plus	Versi 7.1 7116
zohocorp	manageengine admanager plus	Versi 7.1 7117
zohocorp	manageengine admanager plus	Versi 7.1 7118
zohocorp	manageengine admanager plus	Versi 7.1 7120
zohocorp	manageengine admanager plus	Versi 7.1 7121
zohocorp	manageengine admanager plus	Versi 7.1 7122
zohocorp	manageengine admanager plus	Versi 7.1 7123
zohocorp	manageengine admanager plus	Versi 7.1 7124
zohocorp	manageengine admanager plus	Versi 7.1 7125
zohocorp	manageengine admanager plus	Versi 7.1 7126
zohocorp	manageengine admanager plus	Versi 7.1 7130
zohocorp	manageengine admanager plus	Versi 7.1 7131
zohocorp	manageengine admanager plus	Versi 7.1 7140
zohocorp	manageengine admanager plus	Versi 7.1 7141
zohocorp	manageengine admanager plus	Versi 7.1 7150
zohocorp	manageengine admanager plus	Versi 7.1 7151
zohocorp	manageengine admanager plus	Versi 7.1 7160
zohocorp	manageengine admanager plus	Versi 7.1 7161
zohocorp	manageengine admanager plus	Versi 7.1 7162
zohocorp	manageengine admanager plus	Versi 7.1 7163
zohocorp	manageengine admanager plus	Versi 7.1 7170
zohocorp	manageengine admanager plus	Versi 7.1 7171
zohocorp	manageengine admanager plus	Versi 7.1 7180
zohocorp	manageengine admanager plus	Versi 7.1 7181
zohocorp	manageengine admanager plus	Versi 7.1 7182

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-31492.html advisory vendor
https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-passwo... exploit · advisory pihak ketiga
http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.