Skip to content

H3-2022-0011

Zoho ManageEngine ADAudit Plus Remote Code Execution Vulnerability

Category VULNERABILITY
Base Score 10.0

Description

Zoho ManageEngine ADAudit Plus is affected by multiple vulnerabilities that, when used in combination, allow remote unauthenticated attackers to achieve remote code execution with the privileges of the ADAudit Plus application.

Impact

Remote unauthenticated attackers can execute arbitrary commands on the vulnerable target. Attackers can decrypt the contents of the ADAudit Plus database, which is likely to contain highly privileged Windows domain user credentials in cleartext.

References