CVE-2021-37420: Medium severity ZohoCorp ManageEngine ADManager Plus vulnerability
Published Sep 21, 2021
·Updated
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.
Affected Software
14 affected components
ZohoCorp ManageEngine ADManager Plus<6.1
ZohoCorp ManageEngine ADManager Plus=6.1
ZohoCorp ManageEngine ADManager Plus=6.1-6100
ZohoCorp ManageEngine ADManager Plus=6.1-6101
ZohoCorp ManageEngine ADManager Plus=6.1-6102
ZohoCorp ManageEngine ADManager Plus=6.1-6103
ZohoCorp ManageEngine ADManager Plus=6.1-6104
ZohoCorp ManageEngine ADManager Plus=6.1-6105
ZohoCorp ManageEngine ADManager Plus=6.1-6106
ZohoCorp ManageEngine ADManager Plus=6.1-6107
ZohoCorp ManageEngine ADManager Plus=6.1-6108
ZohoCorp ManageEngine ADManager Plus=6.1-6109
ZohoCorp ManageEngine ADManager Plus=6.1-6110
ZohoCorp ManageEngine ADManager Plus=6.1-6111
Remediation
Event History
Sep 21, 2021
CVE Published
via MITRE·12:52 PM
Data Sourced
via MITRE·12:52 PM
Description
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-37420?
CVE-2021-37420 is a vulnerability in Zoho ManageEngine ADSelfService Plus before 6112 that allows for mail spoofing.
2
How severe is CVE-2021-37420?
CVE-2021-37420 has a severity rating of 6.5 (medium).
3
Which software versions are affected by CVE-2021-37420?
CVE-2021-37420 affects Zoho ManageEngine ADSelfService Plus versions up to and including 6.1.
4
How can I fix CVE-2021-37420?
To fix CVE-2021-37420, update to version 6.1-6112 or later of Zoho ManageEngine ADSelfService Plus.
5
Where can I find more information about CVE-2021-37420?
You can find more information about CVE-2021-37420 at the following sources: [link1], [link2], [link3].