Description
ManageEngine OpManager, Applications Manager及IT360中存在信息泄露漏洞，该漏洞是由于应用程序对发送到FailOverHelperServlet的数据验证不足及对用户名缺少必要认证引起的。
ManageEngine多个产品信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://app.opencve.io/cve/?product=manageengine_assetexplorer&vendor=zohocorp
https://www.sentinelone.com/vulnerability-database/cve-2022-35403/
https://www.tenable.com/security/research/tra-2023-35
https://github.com/advisories/GHSA-2jvx-3h5f-w2j7
https://thehackernews.com/2023/02/experts-sound-alarm-over-growing.html
https://www.bleepingcomputer.com/news/security/exploit-released-for-critical-manageengine-rce-bug-patch-now/
https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html
https://www.securityweek.com/wild-exploitation-recent-manageengine-vulnerability-commences/