CVE-2021-31857 | SynScan

Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2021-31857

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types.

Published: Jun 16, 2021
Updated: Apr 14, 2023
CVE: CVE-2021-31857
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
zohocorp / manageengine_password_manager_pro	11.1-build_11101	11.1-build_11101.x
zohocorp / manageengine_password_manager_pro	11.1-build_11102	11.1-build_11102.x
zohocorp / manageengine_password_manager_pro	-	11.1
zohocorp / manageengine_password_manager_pro	11.1	11.1.x
zohocorp / manageengine_password_manager_pro	11.1-build_11103	11.1-build_11103.x