CVE-2015-9107 | BDVDB-2026-88428 Detail

Description#

Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesn't use a per-system key or even a salt; therefore, it's possible to create a universal decryptor.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-08-04Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.