ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.
NVD-CWE-noinfo