Files
vuln-nvd/data/2025/CVE-2025-1723.json
T

2 lines
4.0 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"ADSelfService Plus","vendor":"ManageEngine","versions":[{"lessThan":"6511","status":"affected","version":"0","versionType":"6511"}]}],"source":"0fc0942c-577d-436f-ae8e-945763c79b02"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"39DC8AD8-D6CC-4B7A-AE11-9351D5A3D3C7","versionEndExcluding":"6.5","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6500:*:*:*:*:*:*","matchCriteriaId":"320659C3-0C56-43D5-A29F-64FDC62B91FC","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6501:*:*:*:*:*:*","matchCriteriaId":"A4713150-31DF-46BB-9F91-11DE18ACCA85","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6502:*:*:*:*:*:*","matchCriteriaId":"044111C4-C12B-4389-AEA5-78362C997183","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6503:*:*:*:*:*:*","matchCriteriaId":"F6883E07-C47E-47CA-B013-96A7853E6CDD","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6504:*:*:*:*:*:*","matchCriteriaId":"3B9EEE99-EDF2-4521-947F-D0DC903C4773","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6505:*:*:*:*:*:*","matchCriteriaId":"FFE2422E-71AC-40E6-BFC6-5030A427A3C7","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6506:*:*:*:*:*:*","matchCriteriaId":"2652A735-7EB8-4143-9847-07C35CC7DA05","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6507:*:*:*:*:*:*","matchCriteriaId":"FDA211A5-74C6-4F04-B2A3-F616DF322308","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6508:*:*:*:*:*:*","matchCriteriaId":"7770CE61-3B0D-42E0-952D-660D518CEB12","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6509:*:*:*:*:*:*","matchCriteriaId":"8FC73F1B-75C0-4D0B-94E4-EAE04390E1FD","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6510:*:*:*:*:*:*","matchCriteriaId":"F1096C37-0401-4377-822F-51E16A062FAF","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug."},{"lang":"es","value":"Las versiones 6510 y anteriores de Zohocorp ManageEngine ADSelfService Plus son vulnerables a la apropiación de cuentas debido a la gestión incorrecta de las sesiones. Los titulares de cuentas válidas en la configuración solo tienen el potencial de explotar este error."}],"id":"CVE-2025-1723","lastModified":"2026-06-17T08:39:40.037","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1723","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-03-03T14:23:30.263370Z","version":"2.0.3"}}]},"published":"2025-03-03T08:15:15.717","references":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","tags":["Vendor Advisory"],"url":"https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html"}],"sourceIdentifier":"0fc0942c-577d-436f-ae8e-945763c79b02","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-287"}],"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary"}]}