CVE-2021-31874 | Vulnerability Database | Aqua Security

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application.

Affected Software

Name	Vendor	Start Version	End Version
Manageengine_adselfservice_plus	Zohocorp	*	6.1 (excluding)
Manageengine_adselfservice_plus	Zohocorp	6.1 (including)	6.1 (including)
Manageengine_adselfservice_plus	Zohocorp	6.1-6100 (including)	6.1-6100 (including)
Manageengine_adselfservice_plus	Zohocorp	6.1-6101 (including)	6.1-6101 (including)
Manageengine_adselfservice_plus	Zohocorp	6.1-6102 (including)	6.1-6102 (including)
Manageengine_adselfservice_plus	Zohocorp	6.1-6103 (including)	6.1-6103 (including)

References

https://blog.stmcyber.com/vulns/cve-2021-31874/
https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes
https://blog.stmcyber.com/vulns/cve-2021-31874/
https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes

NVD	https://nvd.nist.gov/vuln/detail/CVE-2021-31874
CWE	https://cwe.mitre.org/data/definitions/.html