CVE

Id
45857  
CVE No.
CVE-2010-3273  
Status
Candidate  
Description
ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult.  
Phase
Assigned (20100909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
499022 45857 CVE-2010-3273 BUGTRAQ:20110210 CORE-2011-0103 - ZOHO ManageEngine ADSelfService multiple vulnerabilities  View
499023 45857 CVE-2010-3273 URL:http://www.securityfocus.com/archive/1/archive/1/516396/100/0/threaded  View
499024 45857 CVE-2010-3273 MISC:http://www.coresecurity.com/content/zoho-manageengine-vulnerabilities  View
499025 45857 CVE-2010-3273 BID:46331  View
499026 45857 CVE-2010-3273 URL:http://www.securityfocus.com/bid/46331  View
499027 45857 CVE-2010-3273 OSVDB:70869  View
499028 45857 CVE-2010-3273 URL:http://www.osvdb.org/70869  View
499029 45857 CVE-2010-3273 SECUNIA:43241  View
499030 45857 CVE-2010-3273 URL:http://secunia.com/advisories/43241  View
499031 45857 CVE-2010-3273 SREASON:8089  View
499032 45857 CVE-2010-3273 URL:http://securityreason.com/securityalert/8089  View
499033 45857 CVE-2010-3273 VUPEN:ADV-2011-0392  View
499034 45857 CVE-2010-3273 URL:http://www.vupen.com/english/advisories/2011/0392  View
499035 45857 CVE-2010-3273 XF:adselfservice-resetresult-security-bypass(65348)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37257 JVNDB-2010-003042 VMware Workstation および VMware Player のインストーラにおける Web スクリプトまたは HTML の想定外の解釈が発生する脆弱性 VMware Workstation および VMware Player のインストーラは、インストールディレクトリ内の index.htm ファイルを表示するため、Web スクリプトまたは HTML の想定外の解釈が発生する脆弱性が存在します。 CVE-2010-3277 45857 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003042.html  View