CVE:CVE-2022-35405
CNNVD:CNNVD-202207-1615
ZOHO ManageEngine Password Manager Pro是美国卓豪（ZOHO）公司的一款密码管理器。
ZOHO ManageEngine Password Manager Pro 12101 之前版本和PAM360 5510之前版本存在安全漏洞，该漏洞源于容易受到未经身份验证的远程代码执行的攻击。（这也会影响 ManageEngine Access Manager Plus 4303之前版本的身份验证。）
solution:Upgrade zohocorp manageengine_access_manager_plus to a higher version than 4.3,4.3:build4300,4.3:build4301,4.3:build4302,and avoid the version (,4.3),4.3:build4300,4.3:build4301,4.3:build4302; Upgrade zohocorp manageengine_pam360 to a higher version than 5.5,5.5:build5500,and avoid the version (,5.5),5.5:build5500; Upgrade zohocorp manageengine_password_manager_pro to a higher version than 12.1,12.1:build12100,and avoid the version (,12.1),12.1:build12100