Vulnerability Database

296,278

Total vulnerabilities in the database

CVE-2010-3273

ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult.

  • Published: Feb 17, 2011
  • Updated: Apr 13, 2023
  • CVE: CVE-2010-3273
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
zohocorp / manageengine_adselfservice_plus - 4.4.x