{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-03-02T14:34:49", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2022-24306", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329", "refsource": "MISC", "url": "https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2022-24306", "datePublished": "2022-03-02T14:34:49", "dateReserved": "2022-02-02T00:00:00", "dateUpdated": "2022-03-02T14:34:49", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4000:*:*:*:*:*:*", "matchCriteriaId": "09BDEB21-3B6E-47AC-9DBC-163FB6FA4746", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4001:*:*:*:*:*:*", "matchCriteriaId": "4F6A44D7-A036-4351-A78F-A8C3A7BF6AE7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4002:*:*:*:*:*:*", "matchCriteriaId": "212A6DCF-09BC-4DBB-B656-557D1DB4CB12", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4003:*:*:*:*:*:*", "matchCriteriaId": "7B41C407-C299-4734-9A17-1EE4B4806890", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4004:*:*:*:*:*:*", "matchCriteriaId": "C4906A2B-1A73-4DE2-9228-A78F7C765026", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4005:*:*:*:*:*:*", "matchCriteriaId": "17B57F68-141D-4889-8B96-D3133BB908B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4006:*:*:*:*:*:*", "matchCriteriaId": "382C808D-C380-45F1-B3F8-F1D7654FFAB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4007:*:*:*:*:*:*", "matchCriteriaId": "9AB8465D-2FCE-4F65-BC9B-48B9F1AECBD0", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4008:*:*:*:*:*:*", "matchCriteriaId": "E8FD8D45-6A45-429C-B4F9-922D6A9D8659", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4009:*:*:*:*:*:*", "matchCriteriaId": "F70057C3-4E2B-4EED-B07E-A09E072C68F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4010:*:*:*:*:*:*", "matchCriteriaId": "470A356C-1B29-4D9D-A12D-EC8C4FA8DE96", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4011:*:*:*:*:*:*", "matchCriteriaId": "94CB1F6D-C7C6-412E-B653-63D6CC174E7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4012:*:*:*:*:*:*", "matchCriteriaId": "2CD496FA-1561-4F5E-BFB5-E77BB1054D21", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4013:*:*:*:*:*:*", "matchCriteriaId": "028981B7-2C99-43F4-945F-A3B627336AC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4014:*:*:*:*:*:*", "matchCriteriaId": "C87FB6C2-9752-4EA3-9C0C-3EC65BD56F77", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4015:*:*:*:*:*:*", "matchCriteriaId": "73206FB9-245E-4524-AFE7-4E463D6D9C40", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4016:*:*:*:*:*:*", "matchCriteriaId": "5D5FA0D6-B049-4231-A818-7E2882738E60", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4017:*:*:*:*:*:*", "matchCriteriaId": "F9242E53-E75F-42E5-99F1-12C588BED134", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4018:*:*:*:*:*:*", "matchCriteriaId": "0C3A5EA7-C212-4037-99C3-6594C5A40F62", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4020:*:*:*:*:*:*", "matchCriteriaId": "97D43A12-645A-4F61-A16F-AA34667A9849", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4021:*:*:*:*:*:*", "matchCriteriaId": "AC07CD8B-7A29-4B48-8ED5-F8757938235E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4022:*:*:*:*:*:*", "matchCriteriaId": "47BA2DD8-972E-4552-91DD-2348705E4684", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4023:*:*:*:*:*:*", "matchCriteriaId": "6005E32C-224C-4B9F-B5C7-959356109DAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4024:*:*:*:*:*:*", "matchCriteriaId": "E585EDAE-85FE-4645-880F-08F188CF5B60", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4025:*:*:*:*:*:*", "matchCriteriaId": "1E0F3752-8E06-4529-A7C1-3EF2DC92DA19", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4026:*:*:*:*:*:*", "matchCriteriaId": "D71CBF0F-BA4B-47D9-B347-65FCC6AE1C41", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4027:*:*:*:*:*:*", "matchCriteriaId": "5992F4BD-8123-4EDB-8096-573CC3ABA0EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4028:*:*:*:*:*:*", "matchCriteriaId": "01DD9705-1A70-4315-B1BF-ADF18A38E339", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4029:*:*:*:*:*:*", "matchCriteriaId": "45011A9D-05A8-4A20-93C6-EEDEB9257F0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4030:*:*:*:*:*:*", "matchCriteriaId": "6F3DFB57-A55F-4FF0-8B96-E76B56A0EA0D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4031:*:*:*:*:*:*", "matchCriteriaId": "F76647F4-8FC1-4C9E-8E2C-600FFBC50757", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4032:*:*:*:*:*:*", "matchCriteriaId": "70D76387-C702-4E24-9AE9-C9E65A1E892A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4033:*:*:*:*:*:*", "matchCriteriaId": "3903E224-949C-40F8-A09E-078A9C2BFF7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4100:*:*:*:*:*:*", "matchCriteriaId": "5D8A57EF-7DDA-4BB9-9BCB-45840BB4CABE", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4101:*:*:*:*:*:*", "matchCriteriaId": "69B9EB6D-672B-4900-AC0A-B8C48A7FE4E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4102:*:*:*:*:*:*", "matchCriteriaId": "5B5E2A1A-B79D-4702-BF68-8A4F10D50773", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4103:*:*:*:*:*:*", "matchCriteriaId": "91631D17-1FA9-49DA-9F52-AD7CF1877DE5", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4104:*:*:*:*:*:*", "matchCriteriaId": "E3A7935B-261D-4C96-A7F1-0B69DB5FC204", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4105:*:*:*:*:*:*", "matchCriteriaId": "D29FC5CC-10BF-46AD-8A54-7D4FCB758BAD", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4106:*:*:*:*:*:*", "matchCriteriaId": "511F770A-3C33-4C74-BDCD-08001BFB991D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4107:*:*:*:*:*:*", "matchCriteriaId": "7BD7B27E-C327-4B59-9748-FD115038F3BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4108:*:*:*:*:*:*", "matchCriteriaId": "75B99B78-02FB-4095-93D2-C2B6A62F22E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4109:*:*:*:*:*:*", "matchCriteriaId": "310BC862-C83B-4902-ADD6-1F9738601897", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4110:*:*:*:*:*:*", "matchCriteriaId": "FE76E900-8FE0-429A-9576-4CC3F6CE7AB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4200:*:*:*:*:*:*", "matchCriteriaId": "79A2DA7F-906D-4F4C-A602-1B622F4FFF56", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4201:*:*:*:*:*:*", "matchCriteriaId": "8F764008-4995-424A-BFA6-477BCC1D48EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4300:*:*:*:*:*:*", "matchCriteriaId": "36C55DA1-DFD4-4A4A-8B80-150137B18CA2", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4301:*:*:*:*:*:*", "matchCriteriaId": "A611068E-2CEE-4EC4-9832-7F8AC4E019CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4302:*:*:*:*:*:*", "matchCriteriaId": "68638F7E-893A-4444-86A0-AF154387E1F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4303:*:*:*:*:*:*", "matchCriteriaId": "A6BF4FFD-26F4-4340-AF43-1D6CDEC122C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4304:*:*:*:*:*:*", "matchCriteriaId": "96151A78-8169-4ED6-B8F3-1078FA1A83A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4305:*:*:*:*:*:*", "matchCriteriaId": "44134B74-F6C7-42EE-8CEB-A7BDA629621E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4306:*:*:*:*:*:*", "matchCriteriaId": "8FC17511-5304-47A3-9BB8-002CEF7F26DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4307:*:*:*:*:*:*", "matchCriteriaId": "1B42B54C-A559-42C9-963D-1DA0151BF988", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4308:*:*:*:*:*:*", "matchCriteriaId": "D827EE7E-61FB-4937-9458-01F1C167387B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4309:*:*:*:*:*:*", "matchCriteriaId": "54E118C0-D7F2-48A7-BDBF-F1D8AD5D474E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4310:*:*:*:*:*:*", "matchCriteriaId": "8FF4F45F-BFD0-42C3-A44B-9A7F441FB1DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4311:*:*:*:*:*:*", "matchCriteriaId": "42D09BD3-6AE5-4EFF-9758-504B37039E3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4312:*:*:*:*:*:*", "matchCriteriaId": "FAE04D8A-3922-43C5-AF34-82D51E54D26A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4313:*:*:*:*:*:*", "matchCriteriaId": "0684B4A8-D397-4EAB-B117-9A654CF1FF8F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4314:*:*:*:*:*:*", "matchCriteriaId": "EF09D3D5-062D-4F14-BAF2-1FF8D25C31FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4315:*:*:*:*:*:*", "matchCriteriaId": "774FF0CF-3E43-406F-BBF7-CC02C0CC90C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4316:*:*:*:*:*:*", "matchCriteriaId": "99B65E64-49CC-4402-A75E-9589787A8894", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4317:*:*:*:*:*:*", "matchCriteriaId": "78DA6667-B2BB-4801-B02F-E503AB929334", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4318:*:*:*:*:*:*", "matchCriteriaId": "9835B9A5-8661-4E79-90EB-4881A9A898FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4319:*:*:*:*:*:*", "matchCriteriaId": "DFF3A069-39D3-4537-A979-3831466C02BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4320:*:*:*:*:*:*", "matchCriteriaId": "7C12D4AD-E3B9-43FD-8CC1-E19C0E8DD43E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4321:*:*:*:*:*:*", "matchCriteriaId": "41371C99-8984-4367-ADAA-7397FE87029E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4322:*:*:*:*:*:*", "matchCriteriaId": "50AB72A8-6202-46EE-ACD2-A4A8D88DA97E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4323:*:*:*:*:*:*", "matchCriteriaId": "1889CEC7-9A41-40F5-8A59-BD7A5F0D39C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4324:*:*:*:*:*:*", "matchCriteriaId": "197CE310-70FF-4225-A81D-FCA4BEB9A824", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4325:*:*:*:*:*:*", "matchCriteriaId": "956FE561-CC23-4C00-8C89-5ECFDD69281F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4326:*:*:*:*:*:*", "matchCriteriaId": "3596BC94-DB45-461C-8E36-252F4E6CBF1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4327:*:*:*:*:*:*", "matchCriteriaId": "E5CB17AE-7AD1-4478-A038-3DFB493031D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:-:build_4328:*:*:*:*:*:*", "matchCriteriaId": "A4241D16-D730-40BD-9416-20F0EEED9C11", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled."}, {"lang": "es", "value": "Zoho ManageEngine SharePoint Manager Plus versiones anteriores a 4329, permite una toma de posesi\u00f3n de la cuenta porque la autorizaci\u00f3n es manejada inapropiadamente"}], "id": "CVE-2022-24306", "lastModified": "2022-03-09T19:08:59.807", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-03-02T15:15:08.127", "references": [{"source": "cve@mitre.org", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://www.manageengine.com/sharepoint-management-reporting/release-notes.html#4329"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}