CVEs-PoC/2015/CVE-2015-9107.md

CVE-2015-9107

Description

Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesn't use a per-system key or even a salt; therefore, it's possible to create a universal decryptor.

POC

Reference

No PoCs from references.

Github

• https://github.com/theguly/DecryptOpManager
• https://github.com/theguly/exploits