CVE:CVE-2022-43671
CNNVD:CNNVD-202211-2654
ZOHO ManageEngine Password Manager Pro是美国卓豪（ZOHO）公司的一款密码管理器。
ZOHO ManageEngine Password Manager Pro 12122之前的版本、PAM360 5711之前的版本和Access Manager Plus 4306之前的版本存在安全漏洞，该漏洞源于其允许攻击者实现SQL注入。
solution:Upgrade zohocorp manageengine_access_manager_plus to a higher version than 4.3,4.3:build4300,4.3:build4301,4.3:build4302,4.3:build4303,4.3:build4304,4.3:build4305,and avoid the version (,4.3),4.3:build4300,4.3:build4301,4.3:build4302,4.3:build4303,4.3:build4304,4.3:build4305; Upgrade zohocorp manageengine_pam360 to a higher version than 5.7,5.7:build5700,5.7:build5710,and avoid the version (,5.7),5.7:build5700,5.7:build5710; Upgrade zohocorp manageengine_password_manager_pro to a higher version than 12.1,12.1:build12100,12.1:build12101,12.1:build12110,12.1:build12120,12.1:build12121,and avoid the version (,12.1),12.1:build12100,12.1:build12101,12.1:build12110,12.1:build12120,12.1:build12121