Lucene search
China National Vulnerability DatabaseCNVD-2021-88252HistoryAug 31, 2021 - 12:00 a.m.
Zoho ManageEngine ADSelfService Plus Access Control Error Vulnerability
2021-08-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
zoho manageengine
adselfservice plus
access control
vulnerability
web-based
end-user
password management
software
exploitation
x-forwarded-for
header
cnvd
EPSS
0.037
Percentile
91.8%
ZOHO zoho manageengine adselfservice plus is a web-based end-user password management software from ZOHO. zoho ManageEngine ADSelfService Plus 6103 and earlier versions are vulnerable to an access control error that could be exploited by an attacker via the X The vulnerability can be exploited to bypass management portal access restrictions via the X-Forwarded-For header.
Related
cvelist
cvelist
CVE-2021-37421
2021-08-30 18:30:22
nvd
nvd
CVE-2021-37421
2021-08-30 19:15:09
prion
prion
Design/Logic Flaw
2021-08-30 19:15:00
cve
cve
CVE-2021-37421
2021-08-30 19:15:09
thn
thn