What is CVE-2019-7161?

CVE-2019-7161 is a high-severity vulnerability in Zohocorp Manageengine Adselfservice Plus, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2019-03-21.

How severe is CVE-2019-7161?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Zohocorp Manageengine Adselfservice Plus

CVE-2019-7161

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.

EPSS: 0.056 (92.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Zohocorp Manageengine_adselfservice_plus — versions 5.0, 5.1, 5.2
N/a — versions n/a

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

cve@mitre.org (Third Party Advisory)
cve@mitre.org (Patch, Release Notes, Vendor Advisory)
cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2019-7161?: CVE-2019-7161 is a high-severity vulnerability in Zohocorp Manageengine Adselfservice Plus, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2019-03-21.
How severe is CVE-2019-7161?: High severity. CVSS v3 base score is 7.5 out of 10.