Description (CNA)
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/
- https://www.manageengine.com/products/self-service-password/release-notes.html
- https://www.excellium-services.com/cert-xlm-advisory
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-7161
ADP enrichment
No English description supplied.