Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine Adselfservice Plus

githubexploit · 2024-10-16

Description

Security exploit in Zohocorp Manageengine Adselfservice Plu

Entry point

ParametermethodToCall · request body

PathRestAPI/LogonCustomization

REST API authentication bypass vulnerability used to upload a payload via REST endpoint.

Affected Zohocorp Manageengine Adselfservice Plus versions

Zohocorp Manageengine Adselfservice Plus< 6.1

All known vulnerabilities by product

Zoho Manageengine Adselfservice Plus

CVSS 9.8 for CVE-2021-40539

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

99.0%higher than 99.9% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2024-10-17 01:41

Last Seen:2025-08-31 22:19

Reporter:Bu0uCat

Written in:Python

Last commit:2024-10-16

Tags

exploitzohocorp manageengine adselfservice plusrce vulnerabilitypassword managementsingle sign-onactive directory

Other exploits for CVE-2021-40539

Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus

2024-10-12 lpyzdsGITHUB

Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus

2024-10-12 lpyydxsGITHUB

ManageEngine ADSelfService Plus Authentication Bypass / Code Execution Exploit

2021-11-27 metasploitZDTRuby

ManageEngine ADSelfService Plus Authentication Bypass / Code Execution

2021-11-27 mr_mePACKETSTORMRuby

ManageEngine ADSelfService Plus CVE-2021-40539

2021-11-25 Antoine Cervoise, Wilfried Bécard, mr_me, wvu <wvu@metasploit.com>METASPLOITRuby

Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus

2021-11-03 synacktivGITHUB

Exploit Code

README11 lines

## https://sploitus.com/exploit?id=47FC8264-7E00-58CA-A573-A736E43E843E
# ADSelfService-Plus-RCE-CVE-2021-40539  
ADSelfService Plus RCE Vulnerability Detection Tool (Second-Open Version)  

![Image](https://github.com/user-attachments/assets/90904e5b-8f89-494d-9046-bbde9e227b77)  

# Description  
ZOHO ManageEngine ADSelfService Plus is ZOHO’s integrated self-service password management and single-sign-on solution for Active Directory and cloud applications. #NetworkMapping  
fofa: "ADSelfService"  
      app="ZOHO-ManageEngine-ADSelfService"  
      header="JSESSIONIDADSSP"