CVE-2022-26653 in Remote Access Plus

Summary

by MITRE • 04/16/2022

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator).

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 03/07/2022
• Disclosure: 04/16/2022
• Moderation: accepted
• Entry: VDB-197553
• CPE: ready
• CWE: CWE-200 (confirmed)
• CVSS: 3.5 (VulDB)
• EPSS: 0.02028
• KEV: no
• Activities: very low
• Sector: Chemical, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-26653
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-26653
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-26653/