CISA Warns Of Bug In Zoho ADSelfService Plus

Share post:

The United States Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical vulnerability known as CVE-2021-40539 in Zoho’s ManageEngine ADSelfService Plus password management solution that gives them the privilege to take over a system.

The vulnerability is considered critical because it could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Security notifications from the company and a warning from CISA suggested that the bug was exploited in the wild.

Currently, information about CVE-2021-40539, the fifth critical vulnerability reported for Zoho ManageEngine ADSelfService Plus in 2021, is sparse, with a severity score yet to be calculated by the National Institute of Standards and Technology.

However, companies with ADSelfService Plus builds lower than 6114 are recommended to install the latest developer update available from the service pack.

For more information, read the original story in Bleeping Computer




Related articles

U.S. proposes to safeguard $52bn semiconductor funding from China

The U.S. Commerce Department has proposed new rules to prevent $52 billion in semiconductor manufacturing and research funding...

Old hard drives are more durable than new ones

Secure Data Recovery examined 2,007 damaged or defective hard disk drives (HDDs) and concluded that old drives are...

Book Publishers and Internet Archive face-off in court over library e-books

A federal court in New York is currently hearing arguments in the Hachette v. Internet Archive case, which...

Nvidia to rent out Supercomputers for AI development

Jensen Huang, CEO of Nvidia Corp, has announced that the company will rent out its powerful supercomputers, which...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways