Exploit for #VU56414 Improper access control in Zoho ManageEngine ADSelfService Plus


Published: 2021-11-04 | Updated: 2021-11-24

Vulnerability identifier: #VU56414

Vulnerability risk: Critical

CVSSv3.1: 9.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2021-40539

CWE-ID: CWE-284

Exploitation vector: Network

Exploits in database: 2

Impact: Code execution

Vulnerable software:
Zoho ManageEngine ADSelfService Plus
Client/Desktop applications / Software for system administration

Vendor: Zoho Corporation