CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Exploit Attempt

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•21

Detects an authentication bypass vulnerability (CVE-2021-40539) affecting the REST API URLs in Zoho ManageEngine ADSelfService Plus. The rule specifically looks for requests to vulnerable endpoints that could be used to exploit this flaw.