CVE-2021-20147: Observable Discrepancy

ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of the ChangePasswordAPI. This allows an unauthenticated remote attacker to determine whether a Windows domain user exists...

PT-2022-9167

Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to build 6116 Description The issue allows an unauthenticated remote attacker to determine whether a Windows domain user exists due to an observable response discrepancy in the UMCP operation of t...