CVE-2016-1159 In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a vulnerable hidden service.
MediumCVSS 6.5
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a vulnerable hidden service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Zohocorp ManageEngine Password Manager Pro | = 8.3-build8303 | No fix listed |
| Zohocorp ManageEngine Password Manager Pro | = 8.4-build8400 | No fix listed |
| Zohocorp ManageEngine Password Manager Pro | = 8.4-build8401 | No fix listed |
| Zohocorp ManageEngine Password Manager Pro | = 8.4-build8402 | No fix listed |
| zoho Password Manager Pro (PMP) | = 8.3.0 (Build 8303 | No fix listed |
| zoho Password Manager Pro (PMP) | = 8.4.0 (Build 8400 | No fix listed |
| zoho Password Manager Pro (PMP) | = 8401 | No fix listed |
| zoho Password Manager Pro (PMP) | = 8402). | No fix listed |
References
- jvn.jp third-party-advisory
- excellium-services.com third-party-advisory
- www.manageengine.com vendor-advisory
- www.manageengine.com release-notes