CVE-2021-33617 | BDVDB-2026-157813 Detail

Description#

Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response (to a failed login request) is null only when the username is invalid.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.manageengine.com
https://www.manageengine.com/products/passwordmanagerpro/release-notes.html#pmp11200
https://herolab.usd.de/security-advisories/usd-2021-0015/

Exploit#

No public exploit known

History#

Version 12021-07-31Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.