CVE-2024-0252 — Remote code execution

CVE-2024-0252

Remote code execution PUBLISHED

Description (CNA)

ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability.

Affected (CNA)

Vendor / product	Versions
ManageEngine / ADSelfService Plus	affected 0 before 6402

CWE

CWE-94

References

https://www.manageengine.com/products/self-service-password/advisory/CVE-2024-0252.html

ADP enrichment

CVE

No English description supplied.

https://www.manageengine.com/products/self-service-password/advisory/CVE-2024-0252.html

CISA-ADP

No English description supplied.

No references supplied.