This vulnerability involves the generation of predictable SSO tickets in ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus. An unauthenticated attacker could predict these tickets and use them to authenticate sessions illegitimately, resulting in account takeover. The issue is categorized under CWE-340 (Generation of Predictable Numbers or Identifiers), CWE-330, and CWE-287, highlighting weaknesses in authentication and random number generation. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation allows an unauthenticated attacker to predict SSO tickets and gain unauthorized access to user accounts, leading to full compromise of confidentiality, integrity, and availability of affected systems. This can result in account takeover and potentially broader system compromise depending on the privileges of the compromised accounts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor vendor communications closely. No specific mitigations or workarounds are provided at this time.