Zoho ManageEngine Remote Access Plus Trust Management Issue Vulnerability

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A trust management issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stems from the fact that the affected product has hard-coded credentials associated with resetPWD.xml associated with hard-coded credentials, which could be exploited by an attacker to submit a special request for unauthorized access to the system.