| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine adselfservice plus | ≥ 4.3.3, < 5.0.6 | 5.0.6 |
An authentication bypass vulnerability in the password reset functionality in Zoho ManageEngine ADSelfService Plus before 5.0.6 allows an attacker with physical access to gain a shell with SYSTEM privileges via the restricted thick client browser. The attack uses a long sequence of crafted keyboard input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free