CVE-2021-37421

Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass...

CVE-2021-37421

creationtimestamp| type| source ---|---|--- 2021-08-30 22:38:43+00:00| seen| https://t.me/cibsecurity/28042 2021-09-10 18:38:03+00:00| exploited| https://t.me/truesecator/2092...

CVE-2021-37421

CVE-2021-37421 affects Zoho ManageEngine ADSelfService Plus 6103 and earlier, with an access-control bypass on the admin portal (bypass via headers such as X-Forwarded-For). Public sources in connected docs confirm the vulnerability exists and that an update/patch was released (6104 and earlier u...

CVE-2021-37421

Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass...