Unrated severityNVD Advisory· Published Apr 28, 2022· Updated Aug 3, 2024

CVE-2022-29081

Description

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs (for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize) via the ../RestAPI substring.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoho ManageEngine/Access Manager Plusdescription
Zoho/ManageEngine Remote Access Plusllm-fuzzy
Range: <4302
Manageengine/PAM360llm-fuzzy
Range: <5401
Zohocorp/Manageengine Password Manager Prollm-fuzzy
Range: <12007

Patches

Vulnerability mechanics

References

www.manageengine.com/privileged-session-management/advisory/cve-2022-29081.htmlmitrex_refsource_MISC
www.tenable.com/security/research/tra-2022-14mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.067
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000