Strix
26.1K

CVE-2023-6105

MEDIUMCVSS 5.5/10EPSS 0.69%

Last modified

CVE-2023-6105 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. EPSS estimates a 0.69% chance of exploitation in the next 30 days.

Description

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.

Metrics

CVSS 3.1
5.5/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
0.69%

48.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
ZohocorpManageengine Analytics Plus< 5.3—
ZohocorpManageengine Appcreator< 2.0.0—
ZohocorpManageengine Application Control Plus< 11.2.2328.01—
ZohocorpManageengine Browser Security Plus< 11.2.2328.01—
ZohocorpManageengine Device Control Plus< 11.2.2328.01—
ZohocorpManageengine Endpoint Central< 11.2.2322.01—
ZohocorpManageengine Endpoint Central Msp< 11.2.2322.01—
ZohocorpManageengine Endpoint Dlp Plus< 11.2.2328.01—
ZohocorpManageengine Mobile Device Manager Plus< 10.1.2204.2—
ZohocorpManageengine Mobile Device Manager Plus10.1.2207.4—
ZohocorpManageengine Os Deployer< 1.2.2331.1—
ZohocorpManageengine Patch Manager Plus< 11.2.2328.01—
ZohocorpManageengine Remote Access Plus< 11.2.2328.01—
ZohocorpManageengine Remote Monitoring And Management< 10.2.11—
ZohocorpManageengine Vulnerability Manager Plus< 11.2.2328.01—
ZohocorpManageengine Adselfservice Plus< 6.3—
ZohocorpManageengine Adselfservice Plus6.36300
ZohocorpManageengine Admanager Plus< 7.2—
ZohocorpManageengine Admanager Plus7.27200
ZohocorpManageengine Adaudit Plus< 7.2—
ZohocorpManageengine Adaudit Plus7.27200
ZohocorpManageengine Cloud Security Plus< 4.1—
ZohocorpManageengine Cloud Security Plus4.14100
ZohocorpManageengine Datasecurity Plus< 6.1—
ZohocorpManageengine Datasecurity Plus6.16100
ZohocorpManageengine Exchange Reporter Plus< 5.7—
ZohocorpManageengine Exchange Reporter Plus5.75700
ZohocorpManageengine M365 Manager Plus< 4.5—
ZohocorpManageengine M365 Manager Plus4.5Build4500
ZohocorpManageengine M365 Security Plus< 4.5—
ZohocorpManageengine M365 Security Plus4.54500
ZohocorpManageengine Sharepoint Manager Plus< 4.4—
ZohocorpManageengine Sharepoint Manager Plus4.44400
ZohocorpManageengine Recoverymanager Plus< 6.0—
ZohocorpManageengine Recoverymanager Plus6.0Build6001
ZohocorpManageengine Log360 Ueba< 4.0—
ZohocorpManageengine Log360 Ueba4.0Build4010
ZohocorpManageengine Patch Connect Plus9.0.0Build90001
ZohocorpManageengine Secure Gateway Server< 9.0—
ZohocorpManageengine Secure Gateway Server9.090012
ZohocorpManageengine Opmanager< 12.5—
ZohocorpManageengine Opmanager12.5Build125000
ZohocorpManageengine Opmanager< 12.7—
ZohocorpManageengine Opmanager12.7Build127000
ZohocorpManageengine Oputils< 12.5—
ZohocorpManageengine Oputils12.5Build125000
ZohocorpManageengine Oputils< 12.7—
ZohocorpManageengine Oputils12.7Build127101
ZohocorpManageengine Firewall Analyzer< 12.5—
ZohocorpManageengine Firewall Analyzer12.5Build125000

Showing 50 of 72 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-6105?
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.
How severe is CVE-2023-6105?
CVE-2023-6105 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.69% probability of exploitation in the next 30 days.
How do I fix CVE-2023-6105?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-6105?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST