CVE-2021-31857 Information disclosure in n/a
Attackers can retrieve credentials for non-website resources via a browser extension in Zoho ManageEngine Password Manager Pro.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-31857?
CVE-2021-31857 is a medium-severity vulnerability in n/a, published on 16 Jun 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types.
Which versions are affected by CVE-2021-31857?
It affects 1 product.
Products include Zohocorp Manageengine Password Manager Pro.
How do I fix CVE-2021-31857?
No fix has been published for CVE-2021-31857 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-31857 being exploited?
There is no known exploitation of CVE-2021-31857 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-4vv4-jwqc-29hw.