CISA Warns of Actively Exploited Zoho ManageEngine ADSelfService Vulnerability

In The Hacker News - Original news source is thehackernews.com by Blog Writer

Post Sharing
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday issued a bulletin warning of a zero-day flaw affecting Zoho ManageEngine ADSelfService Plus deployments that is currently being actively exploited in the wild.
The flaw, tracked as CVE-2021-40539, concerns a REST API authentication bypass that could lead to arbitrary remote code execution (RCE). ADSelfService Plus