Manageengine_adselfservice_plus

Repositories	Unknown: This might be proprietary software.
#Vulnerabilities	48

Date	Id	Summary	Products	Score	Patch	Annotated
2011-02-17	CVE-2010-3273	ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult.	Manageengine_adselfservice_plus	N/A
2011-02-17	CVE-2010-3272	accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified (1) Hide_Captcha or (2) quesList parameter in a validateAll action.	Manageengine_adselfservice_plus	N/A