Unscored CVE-2022-26653 EUVD-2022-31205GHSA-r527-qppg-g2jq

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an adm…

Published Apr 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator).

References

https://www.manageengine.com/remote-desktop-management/advisory/cve-2022-26653.html
https://raxis.com/blog/cve-2022-26653-and-cve-2022-26777