CVE-2022-29081

Published: 2022-04-28T20:15Z

Last Modified: 2025-01-13T16:23Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs (for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize) via the ../RestAPI substring. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt