cve/2021/CVE-2021-31159.md

CVE-2021-31159

Description

Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732.

POC

Reference

• http://packetstormsecurity.com/files/163192/Zoho-ManageEngine-ServiceDesk-Plus-9.4-User-Enumeration.html
• https://www.manageengine.com
• https://www.manageengine.com/products/service-desk-msp/readme.html#10519

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/SYRTI/POC_to_review
• https://github.com/WhooAmii/POC_to_review
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/r0eXpeR/supplier
• https://github.com/ricardojoserf/CVE-2021-31159
• https://github.com/soosmile/POC
• https://github.com/trhacknon/Pocingit
• https://github.com/zecool/cve