Lucene search
HistoryNov 06, 2019 - 10:15 p.m.
CVE-2019-18411
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
42.0%
Zoho ManageEngine ADSelfService Plus 5.x through 5803 has CSRF on the users’ profile information page. Users who are attacked with this vulnerability will be forced to modify their enrolled information, such as email and mobile phone, unintentionally. Attackers could use the reset password function and control the system to send the authentication code back to the channel that the attackers own.
Affected configurations
Node
zohocorpmanageengine_adselfservice_plusMatch5.05000
ORzohocorpmanageengine_adselfservice_plusMatch5.05001
ORzohocorpmanageengine_adselfservice_plusMatch5.05002
ORzohocorpmanageengine_adselfservice_plusMatch5.05010
ORzohocorpmanageengine_adselfservice_plusMatch5.05011
ORzohocorpmanageengine_adselfservice_plusMatch5.05020
ORzohocorpmanageengine_adselfservice_plusMatch5.05021
ORzohocorpmanageengine_adselfservice_plusMatch5.05022
ORzohocorpmanageengine_adselfservice_plusMatch5.05030
ORzohocorpmanageengine_adselfservice_plusMatch5.05032
ORzohocorpmanageengine_adselfservice_plusMatch5.05040
ORzohocorpmanageengine_adselfservice_plusMatch5.05041
ORzohocorpmanageengine_adselfservice_plusMatch5.15100
ORzohocorpmanageengine_adselfservice_plusMatch5.15101
ORzohocorpmanageengine_adselfservice_plusMatch5.15102
ORzohocorpmanageengine_adselfservice_plusMatch5.15103
ORzohocorpmanageengine_adselfservice_plusMatch5.15104
ORzohocorpmanageengine_adselfservice_plusMatch5.15105
ORzohocorpmanageengine_adselfservice_plusMatch5.15106
ORzohocorpmanageengine_adselfservice_plusMatch5.15107
ORzohocorpmanageengine_adselfservice_plusMatch5.15108
ORzohocorpmanageengine_adselfservice_plusMatch5.15109
ORzohocorpmanageengine_adselfservice_plusMatch5.15110
ORzohocorpmanageengine_adselfservice_plusMatch5.15111
ORzohocorpmanageengine_adselfservice_plusMatch5.15112
ORzohocorpmanageengine_adselfservice_plusMatch5.15113
ORzohocorpmanageengine_adselfservice_plusMatch5.15114
ORzohocorpmanageengine_adselfservice_plusMatch5.15115
ORzohocorpmanageengine_adselfservice_plusMatch5.25200
ORzohocorpmanageengine_adselfservice_plusMatch5.25201
ORzohocorpmanageengine_adselfservice_plusMatch5.25202
ORzohocorpmanageengine_adselfservice_plusMatch5.25203
ORzohocorpmanageengine_adselfservice_plusMatch5.25204
ORzohocorpmanageengine_adselfservice_plusMatch5.25205
ORzohocorpmanageengine_adselfservice_plusMatch5.25206
ORzohocorpmanageengine_adselfservice_plusMatch5.25207
ORzohocorpmanageengine_adselfservice_plusMatch5.35300
ORzohocorpmanageengine_adselfservice_plusMatch5.35301
ORzohocorpmanageengine_adselfservice_plusMatch5.35302
ORzohocorpmanageengine_adselfservice_plusMatch5.35303
ORzohocorpmanageengine_adselfservice_plusMatch5.35304
ORzohocorpmanageengine_adselfservice_plusMatch5.35305
ORzohocorpmanageengine_adselfservice_plusMatch5.35306
ORzohocorpmanageengine_adselfservice_plusMatch5.35307
ORzohocorpmanageengine_adselfservice_plusMatch5.35308
ORzohocorpmanageengine_adselfservice_plusMatch5.35309
ORzohocorpmanageengine_adselfservice_plusMatch5.35310
ORzohocorpmanageengine_adselfservice_plusMatch5.35311
ORzohocorpmanageengine_adselfservice_plusMatch5.35312
ORzohocorpmanageengine_adselfservice_plusMatch5.35313
ORzohocorpmanageengine_adselfservice_plusMatch5.35314
ORzohocorpmanageengine_adselfservice_plusMatch5.35315
ORzohocorpmanageengine_adselfservice_plusMatch5.35316
ORzohocorpmanageengine_adselfservice_plusMatch5.35317
ORzohocorpmanageengine_adselfservice_plusMatch5.35318
ORzohocorpmanageengine_adselfservice_plusMatch5.35319
ORzohocorpmanageengine_adselfservice_plusMatch5.35320
ORzohocorpmanageengine_adselfservice_plusMatch5.35321
ORzohocorpmanageengine_adselfservice_plusMatch5.35322
ORzohocorpmanageengine_adselfservice_plusMatch5.35323
ORzohocorpmanageengine_adselfservice_plusMatch5.35324
ORzohocorpmanageengine_adselfservice_plusMatch5.35325
ORzohocorpmanageengine_adselfservice_plusMatch5.35326
ORzohocorpmanageengine_adselfservice_plusMatch5.35327
ORzohocorpmanageengine_adselfservice_plusMatch5.35328
ORzohocorpmanageengine_adselfservice_plusMatch5.35329
ORzohocorpmanageengine_adselfservice_plusMatch5.35330
ORzohocorpmanageengine_adselfservice_plusMatch5.45400
ORzohocorpmanageengine_adselfservice_plusMatch5.55500
ORzohocorpmanageengine_adselfservice_plusMatch5.55501
ORzohocorpmanageengine_adselfservice_plusMatch5.55502
ORzohocorpmanageengine_adselfservice_plusMatch5.55503
ORzohocorpmanageengine_adselfservice_plusMatch5.55504
ORzohocorpmanageengine_adselfservice_plusMatch5.55505
ORzohocorpmanageengine_adselfservice_plusMatch5.55506
ORzohocorpmanageengine_adselfservice_plusMatch5.55507
ORzohocorpmanageengine_adselfservice_plusMatch5.55508
ORzohocorpmanageengine_adselfservice_plusMatch5.55509
ORzohocorpmanageengine_adselfservice_plusMatch5.55510
ORzohocorpmanageengine_adselfservice_plusMatch5.55511
ORzohocorpmanageengine_adselfservice_plusMatch5.55512
ORzohocorpmanageengine_adselfservice_plusMatch5.55513
ORzohocorpmanageengine_adselfservice_plusMatch5.55514
ORzohocorpmanageengine_adselfservice_plusMatch5.55515
ORzohocorpmanageengine_adselfservice_plusMatch5.55516
ORzohocorpmanageengine_adselfservice_plusMatch5.55517
ORzohocorpmanageengine_adselfservice_plusMatch5.55518
ORzohocorpmanageengine_adselfservice_plusMatch5.55519
ORzohocorpmanageengine_adselfservice_plusMatch5.55520
ORzohocorpmanageengine_adselfservice_plusMatch5.55521
ORzohocorpmanageengine_adselfservice_plusMatch5.65600
ORzohocorpmanageengine_adselfservice_plusMatch5.65601
ORzohocorpmanageengine_adselfservice_plusMatch5.65602
ORzohocorpmanageengine_adselfservice_plusMatch5.65603
ORzohocorpmanageengine_adselfservice_plusMatch5.65604
ORzohocorpmanageengine_adselfservice_plusMatch5.65605
ORzohocorpmanageengine_adselfservice_plusMatch5.65606
ORzohocorpmanageengine_adselfservice_plusMatch5.65607
ORzohocorpmanageengine_adselfservice_plusMatch5.75702
ORzohocorpmanageengine_adselfservice_plusMatch5.75704
ORzohocorpmanageengine_adselfservice_plusMatch5.75705
ORzohocorpmanageengine_adselfservice_plusMatch5.75706
ORzohocorpmanageengine_adselfservice_plusMatch5.75707
ORzohocorpmanageengine_adselfservice_plusMatch5.75708
ORzohocorpmanageengine_adselfservice_plusMatch5.75709
ORzohocorpmanageengine_adselfservice_plusMatch5.75710
ORzohocorpmanageengine_adselfservice_plusMatch5.85800
ORzohocorpmanageengine_adselfservice_plusMatch5.85801
ORzohocorpmanageengine_adselfservice_plusMatch5.85802
ORzohocorpmanageengine_adselfservice_plusMatch5.85803
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5000:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5001:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5002:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5010:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5011:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5020:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5021:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5022:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5030:*:*:*:*:*:* |
| zohocorp | manageengine_adselfservice_plus | 5.0 | cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0:5032:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2019-18411
2019-11-06 21:48:40
prion
prion
Design/Logic Flaw
2019-11-06 22:15:00
cve
cve
CVE-2019-18411
2019-11-06 22:15:10
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
42.0%
Related for NVD:CVE-2019-18411