CVE-2019-7161

Publicada el 18 mar 2019 · Actualizada el 30 may 2025

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 5.6%

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.

Productos afectados

n/a · n/a

Referencias

https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-7161 https://www.excellium-services.com/cert-xlm-advisory https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/https://www.manageengine.com/products/self-service-password/release-notes.html