Lucene search

[email protected]CVE-2021-37424

HistorySep 21, 2021 - 1:15 p.m.

CVE-2021-37424

2021-09-2113:15:07

[email protected]

web.nvd.nist.gov

cve-2021-37424

manageengine

adselfservice plus

vulnerability

domain

user account takeover

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

JSON

ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.

Affected configurations

NVD

Node

zohocorpmanageengine_admanager_plusRange<6.1

zohocorpmanageengine_admanager_plusMatch6.1-

zohocorpmanageengine_admanager_plusMatch6.16100

zohocorpmanageengine_admanager_plusMatch6.16101

zohocorpmanageengine_admanager_plusMatch6.16102

zohocorpmanageengine_admanager_plusMatch6.16103

zohocorpmanageengine_admanager_plusMatch6.16104

zohocorpmanageengine_admanager_plusMatch6.16105

zohocorpmanageengine_admanager_plusMatch6.16106

zohocorpmanageengine_admanager_plusMatch6.16107

zohocorpmanageengine_admanager_plusMatch6.16108

zohocorpmanageengine_admanager_plusMatch6.16109

zohocorpmanageengine_admanager_plusMatch6.16110

zohocorpmanageengine_admanager_plusMatch6.16111

CPENameOperatorVersion
zohocorp:manageengine_admanager_pluszohocorp manageengine admanager pluslt6.1

CPE	Name	Operator	Version
zohocorp:manageengine_admanager_plus	zohocorp manageengine admanager plus	lt	6.1

References

pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6112-hotfix-release

www.manageengine.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

JSON

Related for CVE-2021-37424

cvelist1 prion1 nvd1