CVE-2022-24306

{"id": "CVE-2022-24306", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-03-02T15:15:08.127", "references": [{"url": "https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled."}, {"lang": "es", "value": "Zoho ManageEngine SharePoint Manager Plus versiones anteriores a 4329, permite una toma de posesi\u00f3n de la cuenta porque la autorizaci\u00f3n es manejada inapropiadamente"}], "lastModified": "2022-03-09T19:08:59.807", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4000:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09BDEB21-3B6E-47AC-9DBC-163FB6FA4746"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4001:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F6A44D7-A036-4351-A78F-A8C3A7BF6AE7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4002:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "212A6DCF-09BC-4DBB-B656-557D1DB4CB12"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4003:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B41C407-C299-4734-9A17-1EE4B4806890"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4004:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4906A2B-1A73-4DE2-9228-A78F7C765026"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4005:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17B57F68-141D-4889-8B96-D3133BB908B3"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4006:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "382C808D-C380-45F1-B3F8-F1D7654FFAB1"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4007:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AB8465D-2FCE-4F65-BC9B-48B9F1AECBD0"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4008:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8FD8D45-6A45-429C-B4F9-922D6A9D8659"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4009:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F70057C3-4E2B-4EED-B07E-A09E072C68F2"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4010:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "470A356C-1B29-4D9D-A12D-EC8C4FA8DE96"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4011:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94CB1F6D-C7C6-412E-B653-63D6CC174E7E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4012:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CD496FA-1561-4F5E-BFB5-E77BB1054D21"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4013:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "028981B7-2C99-43F4-945F-A3B627336AC6"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4014:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C87FB6C2-9752-4EA3-9C0C-3EC65BD56F77"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4015:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73206FB9-245E-4524-AFE7-4E463D6D9C40"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4016:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D5FA0D6-B049-4231-A818-7E2882738E60"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4017:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9242E53-E75F-42E5-99F1-12C588BED134"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4018:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C3A5EA7-C212-4037-99C3-6594C5A40F62"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4020:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97D43A12-645A-4F61-A16F-AA34667A9849"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4021:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC07CD8B-7A29-4B48-8ED5-F8757938235E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4022:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47BA2DD8-972E-4552-91DD-2348705E4684"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4023:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6005E32C-224C-4B9F-B5C7-959356109DAE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4024:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E585EDAE-85FE-4645-880F-08F188CF5B60"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4025:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E0F3752-8E06-4529-A7C1-3EF2DC92DA19"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4026:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D71CBF0F-BA4B-47D9-B347-65FCC6AE1C41"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4027:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5992F4BD-8123-4EDB-8096-573CC3ABA0EE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4028:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01DD9705-1A70-4315-B1BF-ADF18A38E339"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4029:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45011A9D-05A8-4A20-93C6-EEDEB9257F0C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4030:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F3DFB57-A55F-4FF0-8B96-E76B56A0EA0D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4031:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F76647F4-8FC1-4C9E-8E2C-600FFBC50757"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4032:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70D76387-C702-4E24-9AE9-C9E65A1E892A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4033:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3903E224-949C-40F8-A09E-078A9C2BFF7E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4100:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D8A57EF-7DDA-4BB9-9BCB-45840BB4CABE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4101:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69B9EB6D-672B-4900-AC0A-B8C48A7FE4E1"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4102:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B5E2A1A-B79D-4702-BF68-8A4F10D50773"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4103:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91631D17-1FA9-49DA-9F52-AD7CF1877DE5"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4104:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3A7935B-261D-4C96-A7F1-0B69DB5FC204"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4105:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D29FC5CC-10BF-46AD-8A54-7D4FCB758BAD"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4106:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "511F770A-3C33-4C74-BDCD-08001BFB991D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4107:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BD7B27E-C327-4B59-9748-FD115038F3BC"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4108:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75B99B78-02FB-4095-93D2-C2B6A62F22E5"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4109:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "310BC862-C83B-4902-ADD6-1F9738601897"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4110:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE76E900-8FE0-429A-9576-4CC3F6CE7AB9"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4200:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79A2DA7F-906D-4F4C-A602-1B622F4FFF56"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4201:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F764008-4995-424A-BFA6-477BCC1D48EA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4300:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36C55DA1-DFD4-4A4A-8B80-150137B18CA2"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4301:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A611068E-2CEE-4EC4-9832-7F8AC4E019CE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4302:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68638F7E-893A-4444-86A0-AF154387E1F8"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4303:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6BF4FFD-26F4-4340-AF43-1D6CDEC122C1"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4304:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96151A78-8169-4ED6-B8F3-1078FA1A83A2"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4305:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44134B74-F6C7-42EE-8CEB-A7BDA629621E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4306:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FC17511-5304-47A3-9BB8-002CEF7F26DB"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4307:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B42B54C-A559-42C9-963D-1DA0151BF988"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4308:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D827EE7E-61FB-4937-9458-01F1C167387B"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4309:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54E118C0-D7F2-48A7-BDBF-F1D8AD5D474E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4310:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FF4F45F-BFD0-42C3-A44B-9A7F441FB1DA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4311:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42D09BD3-6AE5-4EFF-9758-504B37039E3E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4312:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAE04D8A-3922-43C5-AF34-82D51E54D26A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4313:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0684B4A8-D397-4EAB-B117-9A654CF1FF8F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4314:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF09D3D5-062D-4F14-BAF2-1FF8D25C31FA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4315:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "774FF0CF-3E43-406F-BBF7-CC02C0CC90C3"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4316:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99B65E64-49CC-4402-A75E-9589787A8894"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4317:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78DA6667-B2BB-4801-B02F-E503AB929334"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4318:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9835B9A5-8661-4E79-90EB-4881A9A898FA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4319:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFF3A069-39D3-4537-A979-3831466C02BA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4320:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C12D4AD-E3B9-43FD-8CC1-E19C0E8DD43E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4321:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41371C99-8984-4367-ADAA-7397FE87029E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4322:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50AB72A8-6202-46EE-ACD2-A4A8D88DA97E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4323:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1889CEC7-9A41-40F5-8A59-BD7A5F0D39C8"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4324:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "197CE310-70FF-4225-A81D-FCA4BEB9A824"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4325:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "956FE561-CC23-4C00-8C89-5ECFDD69281F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4326:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3596BC94-DB45-461C-8E36-252F4E6CBF1C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4327:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5CB17AE-7AD1-4478-A038-3DFB493031D3"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4328:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4241D16-D730-40BD-9416-20F0EEED9C11"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}