CVE-2016-1161

Cross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before 8.5 (Build 8500).

Score

CVSS 3.0 8.0 High

Status

Modified - vultures@jpcert.or.jp

Published

2017-04-20

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Password Manager Pro (Zohocorp)

References

• http://jvn.jp/en/vu/JVNVU95113461/
• http://www.securityfocus.com/bid/91531
• https://www.excellium-services.com/cert-xlm-advisory/cve-2016-1161/