Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO.
zohocorp manageengine admanager plus 7.1
zohocorp manageengine admanager plus