| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine remote access plus | < 10.1.2132 | 10.1.2132 |
Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free