Lucene search
MitreCVELIST:CVE-2021-42955HistoryNov 17, 2021 - 12:26 p.m.
CVE-2021-42955
2021-11-1712:26:22
mitre
www.cve.org
2
zoho
remote access plus server
windows desktop
password reset vulnerability
unauthorized
vulnerability
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L
EPSS
0.001
Percentile
17.8%
Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account.
Related
nvd
nvd
CVE-2021-42955
2021-11-17 13:15:07
prion
prion
Default credentials
2021-11-17 13:15:00
cnvd
cnvd
ZOHO ManageEngine Remote Access Plus Password Reset Vulnerability
2021-11-21 00:00:00
cve
cve
CVE-2021-42955
2021-11-17 13:15:07
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L
EPSS
0.001
Percentile
17.8%
Related for CVELIST:CVE-2021-42955