VULNERABILITY INTELLIGENCE
CVE-2019-7161
CVSS score7.5 HIGH
EPSS probability5.61%
CISA KEVNot currently listed
Published2019-03-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.
Weakness classification
- CWE-798: Use of Hard-coded Credentials
Primary references
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Patch, Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Release Notes, Vendor Advisory