ADSelfService Plus 5817 released with an important security fix

Hello Everyone,

We have released a new build of ADSelfService Plus, 5817, which fixes a security vulnerability.

Issues Fixed :

Fixed a vulnerability which allowed a user to enable integration with other supported ManageEngine products bypassing authentication [CVE-2020-24786] , which was reported by Florian Hauser.
Issue in using Push Notification authentication for logging into ADSelfService Plus when TFA is enabled.

How to update?

A service pack for this build will be released soon. Stay tuned.

Meanwhile, to fix the vulnerability, refer to this forum post.

New to ADSelfService Plus?

Download the fully functional 30-day free trial now.

Regards,

ADSelfService Plus Team

Toll Free: +1-84-245-1104

Direct: +1-408-916-9890