CVE-2010-3273

ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user…

published February 17, 2011

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03332 · 88.6th percentile
Published
2011-02-17T17:00Z
EPSS history
Timeline
  • 17 FEB 17:00Z
    ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user…
    cvelistv5