CVE:CVE-2022-47523
CNNVD:CNNVD-202301-321
ZOHO ManageEngine Password Manager Pro等都是美国卓豪（ZOHO）公司的产品。ZOHO ManageEngine Password Manager Pro是一款密码管理器。ZOHO ManageEngine Access Manager Plus是ZOHO ManageEngine PAM360是一款完整的 PAM 软件。
ZOHO ManageEngine Access Manager Plus 4309之前版本、Password Manager Pro 12210之前版本、PAM360 5801之前版本存在安全漏洞。攻击者利用该漏洞执行SQL注入攻击。
solution:Upgrade zohocorp manageengine_password_manager_pro to a higher version than 12.2,12.2:build12200,and avoid the version (,12.2),12.2:build12200; Upgrade zohocorp manageengine_pam360 to a higher version than 5.8,5.8:build5800,and avoid the version (,5.8),5.8:build5800; Upgrade zohocorp manageengine_access_manager_plus to a higher version than 4.3,4.3:build4300,4.3:build4301,4.3:build4302,4.3:build4303,4.3:build4304,4.3:build4305,4.3:build4306,4.3:build4307,4.3:build4308,and avoid the version (,4.3),4.3:build4300,4.3:build4301,4.3:build4302,4.3:build4303,4.3:build4304,4.3:build4305,4.3:build4306,4.3:build4307,4.3:build4308