Medium severity · published Nov 15, 2023
CVE-2023-6105
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed
5.5
CVSS
0.7%
EPSS
No
On KEV
Description
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
ManageEngine ADSelfService Plus · Zoho
before 6.3; 6.3; 6.3; 6.3; 6.3 · source: NVD
MA
Manageengine Access Manager Plus · Zohocorp
before 4.3; 4.3; 4.3; 4.3; 4.3; 4.3; +5 more · source: NVD
MA
Manageengine Adaudit Plus · Zohocorp
before 7.2; 7.2; 7.2; 7.2; 7.2; 7.2; +6 more · source: NVD
MA
Manageengine Admanager Plus · Zohocorp
before 7.2; 7.2; 7.2; 7.2; 7.2 · source: NVD
MA
Manageengine Analytics Plus · Zohocorp
before 5.3 · source: NVD
MA
Manageengine Appcreator · Zohocorp
before 2.0.0 · source: NVD
MA
Manageengine Application Control Plus · Zohocorp
before 11.2.2328.01 · source: NVD
MA
Manageengine Assetexplorer · Zohocorp
before 7.0; 7.0; 7.0; 7.0; 7.0; 7.0 · source: NVD
MB
Manageengine Browser Security Plus · Zohocorp
before 11.2.2328.01 · source: NVD
MC
Manageengine Cloud Security Plus · Zohocorp
before 4.1; 4.1; 4.1; 4.1; 4.1; 4.1; +25 more · source: NVD
MD
Manageengine Datasecurity Plus · Zohocorp
before 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +2 more · source: NVD
MD
Manageengine Device Control Plus · Zohocorp
before 11.2.2328.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-6105
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-6105
www.manageengine.com
https://www.manageengine.com/security/advisory/CVE/CVE-2023-6105.html
Exploit
https://www.tenable.com/security/research/tra-2023-35
More from ManageEngine ADSelfService Plus
9.8
CVE-2022-47966
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
9.8
CVE-2022-35405
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
9.8
CVE-2021-40539
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
9.8
CVE-2020-10189
Zoho ManageEngine Desktop Central File Upload Vulnerability
6.8
CVE-2022-28810
Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability