{"id":20467,"date":"2025-04-09T20:27:32","date_gmt":"2025-04-09T20:27:32","guid":{"rendered":""},"modified":"2025-05-29T12:38:11","modified_gmt":"2025-05-29T18:38:11","slug":"cve-2024-0252-remote-code-execution-rce-vulnerability-in-manageengine-adselfservice-plus","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-0252-remote-code-execution-rce-vulnerability-in-manageengine-adselfservice-plus\/","title":{"rendered":"CVE-2024-0252:<\/strong> Remote code execution (RCE) vulnerability in ManageEngine ADSelfService Plus"},"content":{"rendered":"

In January 2024, a critical security vulnerability was identified in ManageEngine ADSelfService Plus, a self-service password management and single sign-on solution for Active Directory and cloud applications.<\/span> This vulnerability, designated as CVE-2024-0252<\/strong>, allows authenticated users to execute arbitrary code remotely on the system where ADSelfService Plus is installed.<\/span> This blog post provides an in-depth analysis of the vulnerability, its potential impact, and recommended mitigation strategies.<\/span>\u200bRed Hat Customer Portal<\/span>+11<\/span><\/span>Qualys ThreatPROTECT<\/span>+11<\/span><\/span>ManageEngine<\/span>+11<\/span><\/span><\/span><\/a><\/span>Qualys ThreatPROTECT<\/span>+3<\/span><\/span>ManageEngine<\/span>+3<\/span><\/span>Security Boulevard<\/span>+3<\/span><\/span><\/span><\/a><\/span><\/span><\/p>\n

Understanding CVE-2024-0252<\/h2>\n

CVE-2024-0252<\/strong> is a remote code execution<\/a> (RCE) vulnerability found in the load balancer component of ManageEngine ADSelfService Plus versions 6401 and earlier. The flaw arises from improper handling within this component, which can be exploited by an authenticated user to execute arbitrary code<\/a> on the host system.<\/span> This could lead to unauthorized access, data breaches, or further exploitation within the network<\/a>.<\/span> \u200bGitHub<\/span>+6<\/span><\/span>INCIBE<\/span>+6<\/span><\/span>SecAlerts<\/span>+6<\/span><\/span><\/span><\/a><\/span>ManageEngine<\/span><\/span><\/span><\/a><\/span><\/p>\n

Technical Details<\/h3>\n

While specific technical details and proof-of-concept (PoC) exploit code for CVE-2024-0252 have not been publicly disclosed, the vulnerability is attributed to improper control of code generation, classified under CWE-94: Improper Control of Generation of Code (‘Code Injection’)<\/a>.<\/span> This indicates that the application fails to properly sanitize user input, allowing attackers to inject and execute malicious code<\/a>.<\/span> \u200bOpenCVE<\/span>+3<\/span><\/span>Feedly<\/span>+3<\/span><\/span>NVD<\/span>+3<\/span><\/span><\/span><\/a><\/span><\/p>\n

Impact Assessment<\/h2>\n

The vulnerability has been assigned<\/a> a CVSS v3.1 base score of 8.8, categorizing it as High<\/strong> severity.<\/span> The breakdown of the score is as follows:\u200b<\/p>\n