| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine adselfservice plus | ≤ 4.4 |
ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free