CVE-2022-24446: Zohocorp ManageEngine Key Manager Plus

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user information) even if no SSH server or user is associated to the operator.

Affected products

• Zohocorp ManageEngine Key Manager Plus: version 6.1.6 only

Published 2022-03-01. Last modified 2026-06-17.