Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-11670: Zohocorp ManageEngine ADManager Plus: Auth Token Leaked to Authorized Users

CVE-2025-11670 · published 10 months ago

Summary

Certain versions of Zohocorp ManageEngine ADManager Plus store authentication credentials in a way that can be accessed by authorized technicians who have special permissions. This means that these technicians could potentially see sensitive information about other users. To fix this, update to version 8025 or later.

What to do

Update zohocorp manageengine_admanager_plus to version 8.0 or later.

Affected software

Vendor	Product	Affected versions
zohocorp	manageengine_admanager_plus	< 8.0 8.0 `cpe:2.3:a:zohocorp:manageengine_admanager_plus::::::::`

Original advisory text

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option ena...

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure.
This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled.

References

https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-11670.htm... Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

4.3 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-200Information Exposure

Timeline

Published15 Dec 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-11670 · NVD

Track software like this

Free during beta