CVE-2018-5353

The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate privileges via spoofing. It does not authenticate the intended server before opening a browser window. An unauthenticated attacker capable of conducting a spoofing attack can redirect the browser to gain execution in the context of the WinLogon.exe process. If Network Level Authentication is not enforced, the vulnerability can be exploited via RDP. Additionally, if the web server has a misconfigured certificate then no spoofing attack is required

• CWE-290

• https://github.com/missing0x00/CVE-2018-5353Exploit, Third Party Advisory
• https://www.manageengine.com/products/self-service-password/release-notes.htmlRelease Notes, Vendor Advisory
• https://github.com/missing0x00/CVE-2018-5353Exploit, Third Party Advisory
• https://www.manageengine.com/products/self-service-password/release-notes.htmlRelease Notes, Vendor Advisory

Published

Sep 30, 2020

Last Modified

Jul 9, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5341An issue was discovered in Zoho ManageEngine Desktop Central…
• CVE-2018-5342An issue was discovered in Zoho ManageEngine Desktop Central…
• CVE-2018-5344In the Linux kernel through 4.14.13, drivers/block/loop.c mi…
• CVE-2018-5345A stack-based buffer overflow within GNOME gcab through 0.7.…
• CVE-2018-5347Seagate Media Server in Seagate Personal Cloud has unauthent…
• CVE-2018-5349A vulnerability has been found in Heimdal PRO v2.2.190, but …
• CVE-2018-5354The custom GINA/CP module in ANIXIS Password Reset Client be…8.8
• CVE-2018-5357ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImag…
• CVE-2018-5358ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImage…
• CVE-2018-5359The server in Flexense SysGauge 3.6.18 operating on port 922…
• CVE-2018-5360LibTIFF before 4.0.6 mishandles the reading of TIFF files, a…
• CVE-2018-5361The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admi…