high7.5
CVE-2019-7161
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704.
Impact
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Adselfservice Plus | Versions 5.0, 5.1, 5.2, 5.3, 5.4, 5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-7161
- https://www.excellium-services.com/cert-xlm-advisory
- https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/
- https://www.manageengine.com/products/self-service-password/release-notes.html
- https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/
- https://www.manageengine.com/products/self-service-password/release-notes.html