CVE-2021-40539

KEV · Ransomware

Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

Vendor / Project: Zoho
Product: ManageEngine
Date added: Nov 3, 2021
Due date: Nov 17, 2021
Known ransomware use: Known
CWEs: CWE-55

Description

Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-40539