CVE-2019-7161

Description

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.

References

https://www.manageengine.com/products/self-service-password/release-notes.html

https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/

https://www.excellium-services.com/cert-xlm-advisory

https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-7161

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS