Security Advisory

CVE-2010-3273

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-02-17 17:00:00

Last updated 2024-08-07 03:03:18

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult.

← Browse all CVEs View on cve.org ↗