CVE-2015-9107

Publication date

2017-08-04 00:00:00

Family

mitre

State

PUBLISHED

Description

Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesnt use a per-system key or even a salt; therefore, its possible to create a universal decryptor.