CVE-2019-15106

An issue was discovered in Zoho ManageEngine OpManager through 12.4x. One can bypass the user password requirement and execute commands on the server. The "username+’@opm’ string is used for the password. For example, if the username is admin, the password is admin@opm.

Source: CVE-2019-15106