CVE-2022-36923 Information disclosure in n/a
Unauthenticated attackers can obtain user API keys to access external APIs in Zoho ManageEngine network management products.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-36923?
CVE-2022-36923 is a medium-severity vulnerability in Zohocorp Manageengine Opmanager, published on 10 Aug 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user's API key, and then access external APIs.
Which versions are affected by CVE-2022-36923?
It affects 7 products.
Products include Zohocorp Manageengine Firewall Analyzer, Zohocorp Manageengine Netflow Analyzer, Zohocorp Manageengine Network Configuration Manager, Zohocorp Manageengine Opmanager, Zohocorp Manageengine Opmanager Msp, Zohocorp Manageengine Opmanager Plus and 1 more.
How do I fix CVE-2022-36923?
No fix has been published for CVE-2022-36923 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-36923 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-36923 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Zohocorp Manageengine Opmanager
Sources
Also known as GHSA-hc4f-4mvr-7cv9.