The critical authentication bypass vulnerability exists in Zoho ManageEngine ADSelfService Plus, officials report.