CVE-2023-2291
Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP) build 4309, ManageEngine Password Manager Pro, and ManageEngine PAM360. These credentials could allow a malicious actor to modify configuration data that would escalate their permissions from that of a low-privileged user to an Administrative user.
| Software | From | Fixed in |
|---|---|---|
| zohocorp / manageengine_pam360 | - | - |
| zohocorp / manageengine_access_manager_plus | 4.3-build4309 | 4.3-build4309.x |
| zohocorp / manageengine_password_manager_pro | - | - |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime