CVE-2021-42956

CVE-2021-42956 affects Zoho ManageEngine Remote Access Plus Server for Windows, up to version 10.1.2132.6. Root cause: improper privilege management causes the server process to run as the logged-in user, enabling memory dump by non-admins. Impact: attacker could remotely dump sensitive informati...