CVE-2022-26653

概要

参考情報

• raxis.com/blog/cve-2022-26653-and-cve-2022-26777 · Exploit
• manageengine.com/remote-desktop-management/advisory/cve-2022-26653.html · Vendor Advisory

manageengine remote access plus のその他の脆弱性

• CVE-2023-6105中 5.5An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-pri…
• CVE-2022-47966緊急 9.8悪用確認済み（CISA KEV）Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache San…
• CVE-2022-26777中 5.3Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.
• CVE-2021-42955高 7.8Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability…
• CVE-2021-42954高 7.8Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation direc…