ManageEngine on Myles Nieman — Bloghttps://blog.msnieman.com/tags/manageengine/Recent content in ManageEngine on Myles Nieman — BlogHugoen-usThu, 28 Aug 2025 00:00:00 +0000ADSelfServicehttps://blog.msnieman.com/writeups/adselfservice/Thu, 28 Aug 2025 00:00:00 +0000https://blog.msnieman.com/writeups/adselfservice/An exposed ManageEngine ADSelfService Plus portal running version 6.1 is vulnerable to CVE-2021-40539 (REST API authentication bypass to RCE), yielding a webshell that runs as NT AUTHORITY\SYSTEM and direct access to both flags.