| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine opmanager | = 11.0= 11.1= 11.2= 11.3= 11.4= 11.5= 11.6= 12.2 |
Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesn't use a per-system key or even a salt; therefore, it's possible to create a universal decryptor.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free