CVEvulnerability

CVE-2021-31857

5.9 MEDIUM Published 2021-06-16 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2021-06-16
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N

Description

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types.

Affected configurations

• zohocorp manageengine password manager pro (< 11.1) • zohocorp manageengine password manager pro 11.1

References

https://www.manageengine.com Vendor Advisory
https://www.manageengine.com/products/passwordmanagerpro/release-notes.html#pmp11104 Release Notes, Vendor Advisory
https://www.manageengine.com Vendor Advisory
https://www.manageengine.com/products/passwordmanagerpro/release-notes.html#pmp11104 Release Notes, Vendor Advisory