Non notée
CVE-2021-20147 ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of…
Description
ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of the ChangePasswordAPI. This allows an unauthenticated remote attacker to determine whether a Windows domain user exists.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ManageEngine ADSelfService Plus 6116 | premières → < 6116 | 6116 |