CVE-2016-1159

In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a vulnerable hidden service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
VendorProductVersion
zohocorpmanageengine_password_manager_pro
8.3:build8303
zohocorpmanageengine_password_manager_pro
8.4:build8400
zohocorpmanageengine_password_manager_pro
8.4:build8401
zohocorpmanageengine_password_manager_pro
8.4:build8402
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jvn.jp/vu/JVNVU90405898/index.html
https://excellium-services.com/cert-xlm-advisory/cve-2016-1159/
https://www.manageengine.com/products/passwordmanagerpro/issues-fixed.html
https://www.manageengine.com/products/passwordmanagerpro/release-notes.html
http://jvn.jp/vu/JVNVU90405898/index.html
https://excellium-services.com/cert-xlm-advisory/cve-2016-1159/
https://www.manageengine.com/products/passwordmanagerpro/issues-fixed.html
https://www.manageengine.com/products/passwordmanagerpro/release-notes.html