Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-03917
HistoryNov 21, 2021 - 12:00 a.m.

ZOHO ManageEngine Remote Access Plus Password Reset Vulnerability

2021-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
zoho
manageengine
remote access
password reset
vulnerability
server
unauthorized mechanism
administrator account
cnvd

EPSS

0.001

Percentile

17.8%

ZOHO ManageEngine Remote Access Plus, a remote access solution from ZOHO, Inc. is vulnerable to a password reset vulnerability in ZOHO ManageEngine Remote Access Plus Server prior to version 10.1.2132, which stems from an unauthorized password reset mechanism. An attacker could use this vulnerability to reset the password of the server administrator account.

EPSS

0.001

Percentile

17.8%

Related for CNVD-2022-03917