description: ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of the ChangePasswordAPI. This allows an unauthenticated remote attacker to determine whether a Windows domain user exists.
problem types: Observable Response Discrepancy
affected:
{
product: ManageEngine ADSelfService Plus
vendor: n/a
versions:
status: affected, version: < 6116
}