Cybersecurity Alerts

Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-55

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-40539