PT-2021-23700

CVE-2021-42955

·

Published

2021-11-17

·

Updated

2022-07-12

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Zoho Remote Access Plus Server Windows Desktop binary versions prior to 10.1.2132
Description The issue allows any non-admin Windows user to reset the password of the Remote Access Plus Server Admin account due to the designed password reset mechanism.
Recommendations For versions prior to 10.1.2132, update to version 10.1.2132 to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-732: Incorrect Permission Assignment for Critical Resource
Related identifiers
CVE-2021-42955
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com