Zoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST APIs.
2023-09-27T15:19:31.137
2024-11-21T08:21:53.520
Modified
CVSSv3.1: 5.4 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | zohocorp | manageengine_admanager_plus | < 7.2 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.2 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.2 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.2 | Yes |