ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in ManageEngine ADSelfService Plus, affecting versions prior to 6519. The issue arises from improper filter configurations, which allow unauthorized access to certain functionalities or data.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized users to gain access to the application or its features without proper credentials.

Remediation

Users can update to ManageEngine ADSelfService Plus build 6519 to address this vulnerability. Instructions for updating are available on the ManageEngine website.