critical9.8
CVE-2021-28958
Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password.
Impact
Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Adselfservice Plus | Versions 4.5, 5.0, 5.0.6, 5.1, 5.2, 5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.stmcyber.com/vulns/cve-2021-28958/
- https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6102-released-with-an-important-security-fix-21-3-2021
- https://www.manageengine.com
- https://www.manageengine.com/products/self-service-password/release-notes.html#6102
- https://blog.stmcyber.com/vulns/cve-2021-28958/
- https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6102-released-with-an-important-security-fix-21-3-2021
- https://www.manageengine.com
- https://www.manageengine.com/products/self-service-password/release-notes.html#6102