CVE-2025-11670 — NTLM Hash Exposure Vulnerability

CVE-2025-11670

NTLM Hash Exposure Vulnerability PUBLISHED

Description (CNA)

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled.

Affected (CNA)

Vendor / product	Versions
Zohocorp / ManageEngine ADManager Plus	affected 0 before 8025

CWE

CWE-200

References

https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-11670.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.