CVE-2019-12476

2019-06-1717:02:28

mitre

www.cve.org

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

56.2%

JSON

An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus before 5.0.6 allows an attacker with physical access to gain a shell with SYSTEM privileges via the restricted thick client browser. The attack uses a long sequence of crafted keyboard input.