← Database

CVE-2022-24446

MEDIUM CVSS: 4.3 Published: 2022-03-01 Modified: 2026-06-17

Description

An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user information) even if no SSH server or user is associated to the operator.

Affected Platforms

Zohocorp Manageengine Key Manager Plus

Weakness Type

NVD-CWE-noinfo

References