| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine adaudit plus | = 7.0.0< 7.0.0 | 7.0.0 |
| manageengine admanager plus | = 7.1< 7.1 | 7.1 |
| manageengine adselfservice plus | = 6.1< 6.1 | 6.1 |
| manageengine exchange reporter plus | = 5.7< 5.7 | 5.7 |
Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free