CVE-2010-3272

accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote…

published February 17, 2011

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified (1) Hide_Captcha or (2) quesList parameter in a validateAll action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04024 · 90.5th percentile
Published
2011-02-17T17:00Z
EPSS history
Timeline
  • 17 FEB 17:00Z
    accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote…
    cvelistv5