← Back

CVE-2021-37417

nvd nist
Published: Aug 30, 2021Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation.

Affected (6)

Zohocorp
1 product
Manageengine Adselfservice Plus
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Adselfservice Plus
Before 6.1
Manageengine Adselfservice Plus
Version 6.1
Manageengine Adselfservice Plus
Version 6.1 6100
Manageengine Adselfservice Plus
Version 6.1 6101
Manageengine Adselfservice Plus
Version 6.1 6102
Manageengine Adselfservice Plus
Version 6.1 6103

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

Source: cve@mitre.org
Release NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesThird Party Advisory

Timeline

No history available yet.