CVE-2021-31874 | SynScan

Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application.

Published: Jul 2, 2021
Updated: Apr 14, 2023
CVE: CVE-2021-31874
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
zohocorp / manageengine_adselfservice_plus	6.1-6100	6.1-6100.x
zohocorp / manageengine_adselfservice_plus	6.1-6103	6.1-6103.x
zohocorp / manageengine_adselfservice_plus	6.1	6.1.x
zohocorp / manageengine_adselfservice_plus	-	6.1
zohocorp / manageengine_adselfservice_plus	6.1-6101	6.1-6101.x
zohocorp / manageengine_adselfservice_plus	6.1-6102	6.1-6102.x