Skip to content
OpenAdvisories
Unscored CVE-2015-9107 EUVD-2015-8960GHSA-6r6j-h6w5-mj5v

Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devic…

Published Aug 4, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesn't use a per-system key or even a salt; therefore, it's possible to create a universal decryptor.

References