CVE-2021-31874 — Manageengine Adselfservice Plus vulnerability

3 documents3 sources

Severity

5.9MEDIUMNVD

EPSS

1.1%

top 21.96%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Zohocorp Manageengine Adselfservice Plus

Timeline

PublishedJul 2

Latest updateMay 24

Description

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages1 packages

▶NVDzohocorp/manageengine_adselfservice_plus< 6.1+1

🔴Vulnerability Details

GHSA

GHSA-938p-949p-98pc: Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync databas↗2022-05-24

▶

CVEList

CVE-2021-31874: Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync databas↗2021-07-02

▶