CVE:CVE-2022-29457
CNNVD:CNNVD-202204-3732
ZOHO ManageEngine ADSelfService Plus是美国卓豪（ZOHO）公司的针对 Active Directory 和云应用程序的集成式自助密码管理和单点登录解决方案。
Zoho ManageEngine ADSelfService Plus 6121存在安全漏洞，该漏洞允许在某些存储路径配置步骤中泄露 NTLM 哈希。
solution:Upgrade zohocorp manageengine_adaudit_plus to a higher version than 7.0.0,7.0.0,7.0.0:7000,7.0.0:7002,7.0.0:7003,7.0.0:7004,7.0.0:7005,7.0.0:7006,7.0.0:7007,7.0.0:7008,7.0.0:7050,7.0.0:7051,7.0.0:7052,7.0.0:7053,7.0.0:7054,7.0.0:7055,and avoid the version (,7.0.0),7.0.0,7.0.0:7000,7.0.0:7002,7.0.0:7003,7.0.0:7004,7.0.0:7005,7.0.0:7006,7.0.0:7007,7.0.0:7008,7.0.0:7050,7.0.0:7051,7.0.0:7052,7.0.0:7053,7.0.0:7054,7.0.0:7055; Upgrade zohocorp manageengine_admanager_plus to a higher version than 7.1,7.1,7.1:7100,7.1:7101,7.1:7102,7.1:7110,7.1:7111,7.1:7112,7.1:7113,7.1:7114,7.1:7115,7.1:7116,7.1:7117,7.1:7118,7.1:7120,7.1:7121,7.1:7122,7.1:7123,7.1:7124,7.1:7125,7.1:7126,7.1:7130,and avoid the version (,7.1),7.1,7.1:7100,7.1:7101,7.1:7102,7.1:7110,7.1:7111,7.1:7112,7.1:7113,7.1:7114,7.1:7115,7.1:7116,7.1:7117,7.1:7118,7.1:7120,7.1:7121,7.1:7122,7.1:7123,7.1:7124,7.1:7125,7.1:7126,7.1:7130; Upgrade zohocorp manageengine_adselfservice_plus to a higher version than 6.1,6.1,6.1:6100,6.1:6101,6.1:6102,6.1:6103,6.1:6104,6.1:6105,6.1:6106,6.1:6107,6.1:6108,6.1:6109,6.1:6110,6.1:6111,6.1:6112,6.1:6113,6.1:6114,6.1:6115,6.1:6116,6.1:6117,6.1:6118,6.1:6119,6.1:6120,and avoid the version (,6.1),6.1,6.1:6100,6.1:6101,6.1:6102,6.1:6103,6.1:6104,6.1:6105,6.1:6106,6.1:6107,6.1:6108,6.1:6109,6.1:6110,6.1:6111,6.1:6112,6.1:6113,6.1:6114,6.1:6115,6.1:6116,6.1:6117,6.1:6118,6.1:6119,6.1:6120; Upgrade zohocorp manageengine_exchange_reporter_plus to a higher version than 5.7,5.7,5.7:5700,and avoid the version (,5.7),5.7,5.7:5700