CVE-2021-41829

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key...

CVE-2021-41827

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive...

Hardcoded credentials

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml...

Code injection

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key...

CVE-2021-41827

CVE-2021-41827 affects Zoho ManageEngine Remote Access Plus prior to 10.1.2121.1. The issue is a hardcoded credential set for read-only access found in the source of the DCBackupRestore JAR archive, enabling potential unauthorized read access if exploited. Public references in the provided docume...

CVE-2021-41827

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive...

CVE-2021-41828

Zoho ManageEngine Remote Access Plus is affected by a hard-coded credentials issue tied to resetPWD.xml, exposed in versions before 10.1.2121.1. The vulnerability could allow unauthorized access via the trust management mechanism. Relevant connected documents corroborate hard-coded credentials in...

CVE-2021-41828

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml...

CVE-2021-41829

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key...

CVE-2021-41829

CVE-2021-41829 affects Zoho ManageEngine Remote Access Plus prior to 10.1.2121.1, where an encryption key is derived from the application’s build number. The Red Hat and NVD entries corroborate the same description. No exploit details are provided in the connected documents. Mitigation is to upgr...

Zoho ManageEngine Remote Access Plus 信任管理问题漏洞

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A trust management issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stems from the fact that the affected product has hard-coded credentials for read-only The...

Zoho ManageEngine Remote Access Plus 信任管理问题漏洞

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A trust management issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stems from the fact that the affected product has hard-coded credentials associated with resetPWD.x...

ZOHO ManageEngine Remote Access Plus 安全特征问题漏洞

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A security signature issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stemmed from the affected product relying on the application's internal version number to calcula...

ZOHO ManageEngine ADManager Plus Code Execution Vulnerability

ZOHO ManageEngine ADManager Plus is a Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day administrative tasks, such as bulk management of user accounts and A...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus is a file upload vulnerability that can be exploited by attackers to cause remote code execution...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78737)

ZOHO ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A file upload vulnerability exists in ZOHO ManageEngine ADManager Plus prior to version 7111, which can be exploited by an attacker to achieve remote code execution...

CVE-2021-37761

Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...

CVE-2021-37761

Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...

CVE-2021-37761

Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution...

CVE-2021-37761

CVE-2021-37761 affects Zoho ManageEngine ADManager Plus (version 7110 and earlier). The issue is an unrestricted file upload vulnerability that can lead to remote code execution . Multiple connected sources confirm the vendor advisory and third-party advisories describe the flaw as a file upload ...