CVE-2023-6105: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user…

PriorityP427medium5.5CVSS 3.1

AVLACLPRLUINSUCHINAN

EPSS

0.69%

48.3th percentile

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.

Affected

75 ranges· showing 25

Vendor	Product	Version range	Fixed in
manageengine	access_manager_plus	< 14304	14304
manageengine	asset_explorer	< 7004	7004
manageengine	service_desk_plus	< 14304	14304
zohocorp	manageengine_access_manager_plus	< 4.3	4.3
zohocorp	manageengine_access_manager_plus	—	—
zohocorp	manageengine_adaudit_plus	< 7.2	7.2
zohocorp	manageengine_adaudit_plus	—	—
zohocorp	manageengine_admanager_plus	< 7.2	7.2
zohocorp	manageengine_admanager_plus	—	—
zohocorp	manageengine_adselfservice_plus	< 6.3	6.3
zohocorp	manageengine_adselfservice_plus	—	—
zohocorp	manageengine_analytics_plus	< 5.3	5.3
zohocorp	manageengine_appcreator	< 2.0.0	2.0.0
zohocorp	manageengine_application_control_plus	< 11.2.2328.01	11.2.2328.01
zohocorp	manageengine_assetexplorer	< 7.0	7.0
zohocorp	manageengine_assetexplorer	—	—
zohocorp	manageengine_browser_security_plus	< 11.2.2328.01	11.2.2328.01
zohocorp	manageengine_cloud_security_plus	< 4.1	4.1
zohocorp	manageengine_cloud_security_plus	—	—
zohocorp	manageengine_datasecurity_plus	< 6.1	6.1
zohocorp	manageengine_datasecurity_plus	—	—
zohocorp	manageengine_device_control_plus	< 11.2.2328.01	11.2.2328.01
zohocorp	manageengine_endpoint_central	< 11.2.2322.01	11.2.2322.01
zohocorp	manageengine_endpoint_central_msp	< 11.2.2322.01	11.2.2322.01
zohocorp	manageengine_endpoint_dlp_plus	< 11.2.2328.01	11.2.2328.01

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.