cve/2021/CVE-2021-40539.md

CVE-2021-40539

Description

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution.

POC

Reference

• http://packetstormsecurity.com/files/165085/ManageEngine-ADSelfService-Plus-Authentication-Bypass-Code-Execution.html
• https://www.manageengine.com

Github

• https://github.com/20142995/Goby
• https://github.com/34zY/APT-Backpack
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/AdamCrosser/awesome-vuln-writeups
• https://github.com/DarkSprings/CVE-2021-40539
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/UNC1739/awesome-vulnerability-research
• https://github.com/Z0fhack/Goby_POC
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/r0eXpeR/supplier
• https://github.com/soosmile/POC
• https://github.com/synacktiv/CVE-2021-40539
• https://github.com/triw0lf/Security-Matters-22
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/xuetusummer/Penetration_Testing_POC