CVE-2023-35854
Last modified
CVE-2023-35854 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Zoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be exploited to steal the domain controller session token for identity spoofing, thereby achieving the privileges of the domain controller administrator. NOTE: the vendor's perspective is that they have "found no evidence or detail of a security vulnerability.". EPSS estimates a 5.98% chance of exploitation in the next 30 days.
Description
Zoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be exploited to steal the domain controller session token for identity spoofing, thereby achieving the privileges of the domain controller administrator. NOTE: the vendor's perspective is that they have "found no evidence or detail of a security vulnerability."
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zohocorp | Manageengine Adselfservice Plus | < 6.1 |
| Zohocorp | Manageengine Adselfservice Plus | 6.1 |
References
- https://github.com/970198175/Simply-useThird Party Advisory
- https://www.manageengine.comProduct
- https://github.com/970198175/Simply-useThird Party Advisory
- https://www.manageengine.comProduct
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-35854?
How severe is CVE-2023-35854?
How do I fix CVE-2023-35854?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-35849VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not …7.5
- CVE-2023-3585Mattermost Boards fail to properly validate a board link, al…4.3
- CVE-2023-35850 SUNNET WMPro portal's file management function has a vulner…7.2
- CVE-2023-35851 SUNNET WMPro portal's FAQ function has insufficient validat…7.5
- CVE-2023-35852In Suricata before 6.0.13 (when there is an adversary who co…7.5
- CVE-2023-35853In Suricata before 6.0.13, an adversary who controls an exte…9.8
- CVE-2023-35855A buffer overflow in Counter-Strike through 8684 allows a ga…9.8
- CVE-2023-35856A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01,…9.8
- CVE-2023-35857In Siren Investigate before 13.2.2, session keys remain acti…9.8
- CVE-2023-35858XPath Injection vulnerabilities in the blog and RSS function…5.3
- CVE-2023-35859A Reflected Cross-Site Scripting (XSS) vulnerability in the …6.1
- CVE-2023-3586Mattermost fails to disable public Boards after the "Enable …5.4
Are you affected by CVE-2023-35854?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST