CVE-2021-37424: Critical severity ZohoCorp ManageEngine ADManager Plus vulnerability
Published Sep 21, 2021
·Updated
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.
Affected Software
14 affected components
ZohoCorp ManageEngine ADManager Plus<6.1
ZohoCorp ManageEngine ADManager Plus=6.1
ZohoCorp ManageEngine ADManager Plus=6.1-6100
ZohoCorp ManageEngine ADManager Plus=6.1-6101
ZohoCorp ManageEngine ADManager Plus=6.1-6102
ZohoCorp ManageEngine ADManager Plus=6.1-6103
ZohoCorp ManageEngine ADManager Plus=6.1-6104
ZohoCorp ManageEngine ADManager Plus=6.1-6105
ZohoCorp ManageEngine ADManager Plus=6.1-6106
ZohoCorp ManageEngine ADManager Plus=6.1-6107
ZohoCorp ManageEngine ADManager Plus=6.1-6108
ZohoCorp ManageEngine ADManager Plus=6.1-6109
ZohoCorp ManageEngine ADManager Plus=6.1-6110
ZohoCorp ManageEngine ADManager Plus=6.1-6111
Remediation
Event History
Sep 21, 2021
CVE Published
via MITRE·12:50 PM
Data Sourced
via MITRE·12:50 PM
Description
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-37424?
CVE-2021-37424 is a vulnerability in ManageEngine ADSelfService Plus before version 6112 that allows for domain user account takeover.
2
What is the severity of CVE-2021-37424?
CVE-2021-37424 has a severity rating of 9.8 (Critical).
3
Which software versions are affected by CVE-2021-37424?
CVE-2021-37424 affects Zohocorp Manageengine Admanager Plus versions 6.1-6.1-6111.
4
How can I fix CVE-2021-37424?
To fix CVE-2021-37424, update ManageEngine ADSelfService Plus to version 6.1-6112 or later.
5
Where can I find more information about CVE-2021-37424?
You can find more information about CVE-2021-37424 at the following links: [Pitstop ManageEngine](https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6112-hotfix-release) and [ManageEngine](https://www.manageengine.com).