CVE-2021-31874

Published: Jul 2, 2021Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application.

Affected (6)

Products: Zohocorp: Manageengine Adselfservice Plus

Zohocorp

1 product

Manageengine Adselfservice Plus

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Adselfservice Plus	Before 6.1
Zohocorp Manageengine Adselfservice Plus	Version 6.1
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6100
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6101
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6102
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6103

References (4)

https://blog.stmcyber.com/vulns/cve-2021-31874/

Source: cve@mitre.org

ExploitThird Party Advisory

https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes

Source: cve@mitre.org

Vendor Advisory

https://blog.stmcyber.com/vulns/cve-2021-31874/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.