ManageEngine ADManager Plus NTLM Hash Exposure

ManageEngine ADManager Plus is a Windows-based Active Directory management tool used by some organizations to manage and maintain their Active Directory infrastructure. This vulnerability allows attackers to expose NTLM hashes, which can be used to gain unauthorized access to the system.

You're affected if you use Zohocorp ManageEngine ADManager Plus versions. Affected versions: 8025 If you don't recognise this software, you're probably not affected.

To fix this vulnerability, upgrade to ManageEngine ADManager Plus version 8026 or later. You can download the latest version from the official ManageEngine website: https://www.manageengine.com/products/ad-manager/download

Immediate mitigations:

• Disable the "Impersonate as Admin" option in the ADManager Plus settings.
• Restrict network access to your ADManager Plus instance (firewall it from the public internet).

• www.manageengine.com