Description
ManageEngine ADSelfService Plus is a self-service password management and single sign-on solution for Active Directory and cloud applications.
ManageEngine ADSelfService Plus builds 6113 and below have an authentication bypass vulnerability in REST API. An unauthenticated attacker could exploit this vulnerability to take control of an affected system.
Remediation
Upgrade to the latest version of ManageEngine ADSelfService Plus
References
Related Vulnerabilities
Drupal Core 9.1.x Multiple Security Bypass Vulnerabilities (9.1.0 - 9.1.12)
Spring Security Authentication Bypass
Drupal Core 9.2.x Multiple Security Bypass Vulnerabilities (9.2.0 - 9.2.5)
WordPress Plugin Social Share Icons & Social Share Buttons Security Bypass (2.4.5)
WordPress Plugin Abandoned Cart Lite for WooCommerce Security Bypass (5.14.2)