CVE & CISA-KEV Catalog

CVE-2023-35785

HIGHEPSS 82th pctl
8.1
CVSS v3
NVD

Description

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange Reporter Plus 5709 and below, Log360 5315 and below, Log360 UEBA 4045 and below, M365 Manager Plus 4529 and below, M365 Security Plus 4529 and below, Recovery Manager Plus 6061 and below, ServiceDesk Plus 14204 and below and 143xx 14302 and below, ServiceDesk Plus MSP 14300 and below, SharePoint Manager Plus 4402 and below, and Support Center Plus 14300 and below are vulnerable to 2FA bypass via a few TOTP authenticators. Note: A valid pair of username and password is required to leverage this vulnerability.

CWE-287Improper Authentication

How to fix

Remediation Available
manageengine ad360NVD
Affected:< 4.3Fixed in:4.3CVE-2023-35785derived from NVD
manageengine adaudit plusNVD
Affected:< 7.2Fixed in:7.2CVE-2023-35785derived from NVD
manageengine admanager plusNVD
Affected:< 7.2Fixed in:7.2CVE-2023-35785derived from NVD
manageengine assetexplorerNVD
Affected:< 6.9Fixed in:6.9CVE-2023-35785derived from NVD
manageengine cloud security plusNVD
Affected:< 4.1Fixed in:4.1CVE-2023-35785derived from NVD
manageengine datasecurity plusNVD
Affected:< 6.1Fixed in:6.1CVE-2023-35785derived from NVD
manageengine eventlog analyzerNVD
Affected:< 12.3.0Fixed in:12.3.0CVE-2023-35785derived from NVD
manageengine exchange reporter plusNVD
Affected:< 5.7Fixed in:5.7CVE-2023-35785derived from NVD
manageengine log360NVD
Affected:< 5.3Fixed in:5.3CVE-2023-35785derived from NVD
manageengine m365 manager plusNVD
Affected:< 4.5Fixed in:4.5CVE-2023-35785derived from NVD
manageengine m365 security plusNVD
Affected:< 4.5Fixed in:4.5CVE-2023-35785derived from NVD
manageengine recoverymanager plusNVD
Affected:< 6.0Fixed in:6.0CVE-2023-35785derived from NVD
manageengine servicedesk plusNVD
Affected:< 14.2Fixed in:14.2CVE-2023-35785derived from NVD
manageengine servicedesk plus mspNVD
Affected:< 14.3Fixed in:14.3CVE-2023-35785derived from NVD
manageengine sharepoint manager plusNVD
Affected:< 4.4Fixed in:4.4CVE-2023-35785derived from NVD
manageengine supportcenter plusNVD
Affected:< 14.3Fixed in:14.3CVE-2023-35785derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

2.43%probability of exploitation in 30 days
82ndpercentile

Elevated risk: more likely to be exploited than 82% of all known CVEs.

References

Related Vulnerabilities

Other CWE-287 (Improper Authentication) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2023-35082Critical9.8100%KEV + RansomFix
CVE-2023-35078Critical9.8100%KEV + RansomFix
CVE-2017-7921Critical9.8100%KEV-
CVE-2024-7593Critical9.8100%KEV-
CVE-2023-46805High8.2100%KEV + Ransom-
CVE-2022-40684Critical9.8100%KEV + RansomFix
Embed a live status badge for CVE-2023-35785
CVE-2023-35785 severity badge

Markdown

[![CVE-2023-35785](https://tridentstack.com/cve/badge/CVE-2023-35785.svg)](https://tridentstack.com/cve/CVE-2023-35785)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-35785"><img src="https://tridentstack.com/cve/badge/CVE-2023-35785.svg" alt="CVE-2023-35785"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.