Default Password Disclosure in Zoho ManageEngine ADManager Plus Version 7182 and Prior

Default Password Disclosure in Zoho ManageEngine ADManager Plus Version 7182 and Prior

CVE-2023-31492 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.

Learn more about our User Device Pen Test.