An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.Referenceshttps://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html