← Back

CVE-2021-37927

nvd nist
Published: Sep 22, 2021Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO.

Affected (6)

Zohocorp
1 product
Manageengine Admanager Plus
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Admanager Plus
Before 7.1
Manageengine Admanager Plus
Version 7.1
Manageengine Admanager Plus
Version 7.1 7100
Manageengine Admanager Plus
Version 7.1 7101
Manageengine Admanager Plus
Version 7.1 7102
Manageengine Admanager Plus
Version 7.1 7110

Related CWEs

CWE-347
Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (6)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Not ApplicableVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not ApplicableVendor Advisory

Timeline

No history available yet.