Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-35785

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange Reporter Plus 5709 and below, Log360 5315 and below, Log360 UEBA 4045 and below, M365 Manager Plus 4529 and below, M365 Security Plus 4529 and below, Recovery Manager Plus 6061 and below, ServiceDesk Plus 14204 and below and 143xx 14302 and below, ServiceDesk Plus MSP 14300 and below, SharePoint Manager Plus 4402 and below, and Support Center Plus 14300 and below are vulnerable to 2FA bypass via a few TOTP authenticators. Note: A valid pair of username and password is required to leverage this vulnerability.

Published

2023-08-28T20:15:08.033

Last Modified

2024-11-21T08:08:41.970

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zohocorp manageengine_ad360 < 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_ad360 4.3 Yes
Application zohocorp manageengine_adaudit_plus < 7.2 Yes
Application zohocorp manageengine_adaudit_plus 7.2 Yes
Application zohocorp manageengine_adaudit_plus 7.2 Yes
Application zohocorp manageengine_adaudit_plus 7.2 Yes
Application zohocorp manageengine_admanager_plus < 7.2 Yes
Application zohocorp manageengine_admanager_plus 7.2 Yes
Application zohocorp manageengine_assetexplorer < 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 6.9 Yes
Application zohocorp manageengine_assetexplorer 7.0 Yes
Application zohocorp manageengine_assetexplorer 7.0 Yes
Application zohocorp manageengine_cloud_security_plus < 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_cloud_security_plus 4.1 Yes
Application zohocorp manageengine_datasecurity_plus < 6.1 Yes
Application zohocorp manageengine_datasecurity_plus 6.1 Yes
Application zohocorp manageengine_datasecurity_plus 6.1 Yes
Application zohocorp manageengine_datasecurity_plus 6.1 Yes
Application zohocorp manageengine_eventlog_analyzer < 12.3.0 Yes
Application zohocorp manageengine_eventlog_analyzer 12.3.0 Yes
Application zohocorp manageengine_eventlog_analyzer 12.3.0 Yes
Application zohocorp manageengine_exchange_reporter_plus < 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_exchange_reporter_plus 5.7 Yes
Application zohocorp manageengine_log360 < 5.3 Yes
Application zohocorp manageengine_log360 5.3 Yes
Application zohocorp manageengine_log360 5.3 Yes
Application zohocorp manageengine_log360 5.3 Yes
Application zohocorp manageengine_log360 5.3 Yes
Application zohocorp manageengine_log360 5.3 Yes
Application zohocorp manageengine_log360 5.3 Yes
Application zohocorp manageengine_log360 5.3 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_log360_ueba 4.0 Yes
Application zohocorp manageengine_m365_manager_plus < 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_manager_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus < 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_m365_security_plus 4.5 Yes
Application zohocorp manageengine_recoverymanager_plus < 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_recoverymanager_plus 6.0 Yes
Application zohocorp manageengine_servicedesk_plus < 14.2 Yes
Application zohocorp manageengine_servicedesk_plus 14.2 Yes
Application zohocorp manageengine_servicedesk_plus 14.2 Yes
Application zohocorp manageengine_servicedesk_plus 14.2 Yes
Application zohocorp manageengine_servicedesk_plus 14.2 Yes
Application zohocorp manageengine_servicedesk_plus 14.2 Yes
Application zohocorp manageengine_servicedesk_plus 14.3 Yes
Application zohocorp manageengine_servicedesk_plus 14.3 Yes
Application zohocorp manageengine_servicedesk_plus 14.3 Yes
Application zohocorp manageengine_servicedesk_plus_msp < 14.3 Yes
Application zohocorp manageengine_servicedesk_plus_msp 14.3 Yes
Application zohocorp manageengine_sharepoint_manager_plus < 4.4 Yes
Application zohocorp manageengine_sharepoint_manager_plus 4.4 Yes
Application zohocorp manageengine_sharepoint_manager_plus 4.4 Yes
Application zohocorp manageengine_sharepoint_manager_plus 4.4 Yes
Application zohocorp manageengine_supportcenter_plus < 14.3 Yes
Application zohocorp manageengine_supportcenter_plus 14.3 Yes
References