CVE-2021-40539

Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

Manageengine Adselfservice Plus

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution.

7. Sep 2021

Ausgewertete Quellen

• Hersteller
  https://www.manageengine.com/products/self-service-password/kb/how-to-fix-authentication-bypass-vulnerability-in-REST-API.html
• Hinweis
  http://packetstormsecurity.com/files/165085/ManageEngine-ADSelfService-Plus-Authentication-Bypass-Code-Execution.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40539
• CISA
  Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
• NVD
  CVE-2021-40539