Skip to content
OpenAdvisories
Medium · 6.4 CVE-2025-11670 EUVD-2025-203359GHSA-3w6x-xqhx-2c63

NTLM Hash Exposure Vulnerability

Published Dec 15, 2025 · Updated Dec 15, 2025 · Assigned by Zohocorp

Description

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. 
This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled.

Affected products

VendorProductAffectedFixed
Zohocorp ManageEngine ADManager Plus < 8025 8025

References