Unscored CVE-2019-7161 EUVD-2019-16711GHSA-645f-643g-f2h4

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information…

Published Mar 18, 2019 · Updated May 30, 2025 · Assigned by mitre

Description

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.

References

https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/
https://www.manageengine.com/products/self-service-password/release-notes.html
https://www.excellium-services.com/cert-xlm-advisory
https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-7161