fkie_cve-2022-24305
Vulnerability from fkie_nvd
Published
2022-03-02 15:15
Modified
2024-11-21 06:50
Severity ?
Summary
Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| cve@mitre.org | https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329 | Release Notes, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329 | Release Notes, Vendor Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4000:*:*:*:*:*:*",
"matchCriteriaId": "09BDEB21-3B6E-47AC-9DBC-163FB6FA4746",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4001:*:*:*:*:*:*",
"matchCriteriaId": "4F6A44D7-A036-4351-A78F-A8C3A7BF6AE7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4002:*:*:*:*:*:*",
"matchCriteriaId": "212A6DCF-09BC-4DBB-B656-557D1DB4CB12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4003:*:*:*:*:*:*",
"matchCriteriaId": "7B41C407-C299-4734-9A17-1EE4B4806890",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4004:*:*:*:*:*:*",
"matchCriteriaId": "C4906A2B-1A73-4DE2-9228-A78F7C765026",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4005:*:*:*:*:*:*",
"matchCriteriaId": "17B57F68-141D-4889-8B96-D3133BB908B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4006:*:*:*:*:*:*",
"matchCriteriaId": "382C808D-C380-45F1-B3F8-F1D7654FFAB1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4007:*:*:*:*:*:*",
"matchCriteriaId": "9AB8465D-2FCE-4F65-BC9B-48B9F1AECBD0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4008:*:*:*:*:*:*",
"matchCriteriaId": "E8FD8D45-6A45-429C-B4F9-922D6A9D8659",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4009:*:*:*:*:*:*",
"matchCriteriaId": "F70057C3-4E2B-4EED-B07E-A09E072C68F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4010:*:*:*:*:*:*",
"matchCriteriaId": "470A356C-1B29-4D9D-A12D-EC8C4FA8DE96",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4011:*:*:*:*:*:*",
"matchCriteriaId": "94CB1F6D-C7C6-412E-B653-63D6CC174E7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4012:*:*:*:*:*:*",
"matchCriteriaId": "2CD496FA-1561-4F5E-BFB5-E77BB1054D21",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4013:*:*:*:*:*:*",
"matchCriteriaId": "028981B7-2C99-43F4-945F-A3B627336AC6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4014:*:*:*:*:*:*",
"matchCriteriaId": "C87FB6C2-9752-4EA3-9C0C-3EC65BD56F77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4015:*:*:*:*:*:*",
"matchCriteriaId": "73206FB9-245E-4524-AFE7-4E463D6D9C40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4016:*:*:*:*:*:*",
"matchCriteriaId": "5D5FA0D6-B049-4231-A818-7E2882738E60",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4017:*:*:*:*:*:*",
"matchCriteriaId": "F9242E53-E75F-42E5-99F1-12C588BED134",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4018:*:*:*:*:*:*",
"matchCriteriaId": "0C3A5EA7-C212-4037-99C3-6594C5A40F62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4020:*:*:*:*:*:*",
"matchCriteriaId": "97D43A12-645A-4F61-A16F-AA34667A9849",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4021:*:*:*:*:*:*",
"matchCriteriaId": "AC07CD8B-7A29-4B48-8ED5-F8757938235E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4022:*:*:*:*:*:*",
"matchCriteriaId": "47BA2DD8-972E-4552-91DD-2348705E4684",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4023:*:*:*:*:*:*",
"matchCriteriaId": "6005E32C-224C-4B9F-B5C7-959356109DAE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4024:*:*:*:*:*:*",
"matchCriteriaId": "E585EDAE-85FE-4645-880F-08F188CF5B60",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4025:*:*:*:*:*:*",
"matchCriteriaId": "1E0F3752-8E06-4529-A7C1-3EF2DC92DA19",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4026:*:*:*:*:*:*",
"matchCriteriaId": "D71CBF0F-BA4B-47D9-B347-65FCC6AE1C41",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4027:*:*:*:*:*:*",
"matchCriteriaId": "5992F4BD-8123-4EDB-8096-573CC3ABA0EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4028:*:*:*:*:*:*",
"matchCriteriaId": "01DD9705-1A70-4315-B1BF-ADF18A38E339",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4029:*:*:*:*:*:*",
"matchCriteriaId": "45011A9D-05A8-4A20-93C6-EEDEB9257F0C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4030:*:*:*:*:*:*",
"matchCriteriaId": "6F3DFB57-A55F-4FF0-8B96-E76B56A0EA0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4031:*:*:*:*:*:*",
"matchCriteriaId": "F76647F4-8FC1-4C9E-8E2C-600FFBC50757",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4032:*:*:*:*:*:*",
"matchCriteriaId": "70D76387-C702-4E24-9AE9-C9E65A1E892A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4033:*:*:*:*:*:*",
"matchCriteriaId": "3903E224-949C-40F8-A09E-078A9C2BFF7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4100:*:*:*:*:*:*",
"matchCriteriaId": "5D8A57EF-7DDA-4BB9-9BCB-45840BB4CABE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4101:*:*:*:*:*:*",
"matchCriteriaId": "69B9EB6D-672B-4900-AC0A-B8C48A7FE4E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4102:*:*:*:*:*:*",
"matchCriteriaId": "5B5E2A1A-B79D-4702-BF68-8A4F10D50773",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4103:*:*:*:*:*:*",
"matchCriteriaId": "91631D17-1FA9-49DA-9F52-AD7CF1877DE5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4104:*:*:*:*:*:*",
"matchCriteriaId": "E3A7935B-261D-4C96-A7F1-0B69DB5FC204",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4105:*:*:*:*:*:*",
"matchCriteriaId": "D29FC5CC-10BF-46AD-8A54-7D4FCB758BAD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4106:*:*:*:*:*:*",
"matchCriteriaId": "511F770A-3C33-4C74-BDCD-08001BFB991D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4107:*:*:*:*:*:*",
"matchCriteriaId": "7BD7B27E-C327-4B59-9748-FD115038F3BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4108:*:*:*:*:*:*",
"matchCriteriaId": "75B99B78-02FB-4095-93D2-C2B6A62F22E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4109:*:*:*:*:*:*",
"matchCriteriaId": "310BC862-C83B-4902-ADD6-1F9738601897",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4110:*:*:*:*:*:*",
"matchCriteriaId": "FE76E900-8FE0-429A-9576-4CC3F6CE7AB9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4200:*:*:*:*:*:*",
"matchCriteriaId": "79A2DA7F-906D-4F4C-A602-1B622F4FFF56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4201:*:*:*:*:*:*",
"matchCriteriaId": "8F764008-4995-424A-BFA6-477BCC1D48EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4300:*:*:*:*:*:*",
"matchCriteriaId": "36C55DA1-DFD4-4A4A-8B80-150137B18CA2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4301:*:*:*:*:*:*",
"matchCriteriaId": "A611068E-2CEE-4EC4-9832-7F8AC4E019CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4302:*:*:*:*:*:*",
"matchCriteriaId": "68638F7E-893A-4444-86A0-AF154387E1F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4303:*:*:*:*:*:*",
"matchCriteriaId": "A6BF4FFD-26F4-4340-AF43-1D6CDEC122C1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4304:*:*:*:*:*:*",
"matchCriteriaId": "96151A78-8169-4ED6-B8F3-1078FA1A83A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4305:*:*:*:*:*:*",
"matchCriteriaId": "44134B74-F6C7-42EE-8CEB-A7BDA629621E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4306:*:*:*:*:*:*",
"matchCriteriaId": "8FC17511-5304-47A3-9BB8-002CEF7F26DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4307:*:*:*:*:*:*",
"matchCriteriaId": "1B42B54C-A559-42C9-963D-1DA0151BF988",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4308:*:*:*:*:*:*",
"matchCriteriaId": "D827EE7E-61FB-4937-9458-01F1C167387B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4309:*:*:*:*:*:*",
"matchCriteriaId": "54E118C0-D7F2-48A7-BDBF-F1D8AD5D474E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4310:*:*:*:*:*:*",
"matchCriteriaId": "8FF4F45F-BFD0-42C3-A44B-9A7F441FB1DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4311:*:*:*:*:*:*",
"matchCriteriaId": "42D09BD3-6AE5-4EFF-9758-504B37039E3E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4312:*:*:*:*:*:*",
"matchCriteriaId": "FAE04D8A-3922-43C5-AF34-82D51E54D26A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4313:*:*:*:*:*:*",
"matchCriteriaId": "0684B4A8-D397-4EAB-B117-9A654CF1FF8F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4314:*:*:*:*:*:*",
"matchCriteriaId": "EF09D3D5-062D-4F14-BAF2-1FF8D25C31FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4315:*:*:*:*:*:*",
"matchCriteriaId": "774FF0CF-3E43-406F-BBF7-CC02C0CC90C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4316:*:*:*:*:*:*",
"matchCriteriaId": "99B65E64-49CC-4402-A75E-9589787A8894",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4317:*:*:*:*:*:*",
"matchCriteriaId": "78DA6667-B2BB-4801-B02F-E503AB929334",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4318:*:*:*:*:*:*",
"matchCriteriaId": "9835B9A5-8661-4E79-90EB-4881A9A898FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4319:*:*:*:*:*:*",
"matchCriteriaId": "DFF3A069-39D3-4537-A979-3831466C02BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4320:*:*:*:*:*:*",
"matchCriteriaId": "7C12D4AD-E3B9-43FD-8CC1-E19C0E8DD43E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4321:*:*:*:*:*:*",
"matchCriteriaId": "41371C99-8984-4367-ADAA-7397FE87029E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4322:*:*:*:*:*:*",
"matchCriteriaId": "50AB72A8-6202-46EE-ACD2-A4A8D88DA97E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4323:*:*:*:*:*:*",
"matchCriteriaId": "1889CEC7-9A41-40F5-8A59-BD7A5F0D39C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4324:*:*:*:*:*:*",
"matchCriteriaId": "197CE310-70FF-4225-A81D-FCA4BEB9A824",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4325:*:*:*:*:*:*",
"matchCriteriaId": "956FE561-CC23-4C00-8C89-5ECFDD69281F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4326:*:*:*:*:*:*",
"matchCriteriaId": "3596BC94-DB45-461C-8E36-252F4E6CBF1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4327:*:*:*:*:*:*",
"matchCriteriaId": "E5CB17AE-7AD1-4478-A038-3DFB493031D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4328:*:*:*:*:*:*",
"matchCriteriaId": "A4241D16-D730-40BD-9416-20F0EEED9C11",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation."
},
{
"lang": "es",
"value": "Zoho ManageEngine SharePoint Manager Plus versiones anteriores a 4329, es vulnerable a un filtrado de datos confidenciales que conllevan a una escalada de privilegios"
}
],
"id": "CVE-2022-24305",
"lastModified": "2024-11-21T06:50:08.073",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2022-03-02T15:15:08.083",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.