ManageEngine Access Manager Plus Authentication Bypass (CVE-2021-44676)

Binary data manageengineaccessmanagerpluscve-2021-44676.nbin...

CVE-2021-44676

creationtimestamp| type| source ---|---|--- 2021-12-20 18:41:12+00:00| seen| https://t.me/cibsecurity/34287...

CVE-2021-44676

Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements e.g., access control details and modify a few aspects of the application state...

CVE-2021-44676

CVE-2021-44676 affects Zoho ManageEngine Access Manager Plus prior to 4203. Root cause: lack of effective restrictions on user privileges, enabling unauthenticated access to view some data elements and modify certain application-state aspects. Impact is described as access control bypass with pot...