CVE-2021-40456

Windows AD FS Security Feature Bypass Vulnerability...

CVE-2021-41361

Active Directory Federation Server Spoofing Vulnerability...

Security feature bypass

Active Directory Security Feature Bypass Vulnerability...

Spoofing

Active Directory Federation Server Spoofing Vulnerability...

CVE-2021-41361

Technical details about CVE-2021-41361, including affected products, root cause, impact, and fixes, are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2021-41361 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2021-41337 Active Directory Security Feature Bypass Vulnerability

...

CVE-2021-41337

Technical details about CVE-2021-41337 are not publicly provided in the connected documents. Monitor for updates; no specifics about affected products, root cause, or fix are included in the materials.

ZOHO ManageEngine ADManager Plus 代码问题漏洞

Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A remote code execution vulnerability exists in Zoho ManageEngine ADManager Plus Build 7111, which stems from not properly validating file uploads in the Personalization interface and ca...

Patch Tuesday - October 2021

Today’s Patch Tuesday sees Microsoft issuing fixes for over 70 CVEs, affecting the usual mix of their product lines. From Windows, Edge, and Office, to Exchange, SharePoint, and Dynamics, there is plenty of patching to do for workstation and server administrators alike. One vulnerability has...

Active Directory Federation Server Spoofing Vulnerability

...

Active Directory Security Feature Bypass Vulnerability

...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78734)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78730)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

PT-2021-4428 · Microsoft · Active Directory +1

Name of the Vulnerable Software and Affected Versions: Active Directory affected versions not specified Description: The issue is related to insecure privilege management in Active Directory, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78731)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

PT-2021-4750 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Server versions affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Active Directory Federation Services AD FS in Microsoft...

PT-2021-4394 · Microsoft · Windows Ad Fs +1

Name of the Vulnerable Software and Affected Versions: Windows AD FS affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass the security mechanism. This can affect the system. Recommendations: At the moment, there is ...

Solarwinds SolarWinds Pingdom 代码问题漏洞

Solarwinds SolarWinds Pingdom is a complete website monitoring platform from Solarwinds, Inc. It is used to measure the latency of the websites it monitors. A security vulnerability exists in several solarwinds products. The vulnerability stems from the inability to invalidate a user's session...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78728)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...