CVE-2021-20081

🗓️ 10 Jun 2021 11:01:56Reported by tenableType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 88 Views

Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges

Reporter	Title	Published	Views	Family All 9
CNNVD	ZOHO ManageEngine ServiceDesk Plus 安全漏洞	10 Jun 202100:00	–	cnnvd
CNVD	ZOHO ManageEngine ServiceDesk Plus Input Validation Error Vulnerability	11 Jun 202100:00	–	cnvd
Check Point Advisories	ManageEngine ServiceDesk Plus Command Injection (CVE-2021-20081)	21 Jul 202100:00	–	checkpoint_advisories
Cvelist	CVE-2021-20081	10 Jun 202111:01	–	cvelist
Tenable Nessus	ManageEngine ServiceDesk Plus < 11.2 Build 11205 RCE	2 Jul 202100:00	–	nessus
NVD	CVE-2021-20081	10 Jun 202112:15	–	nvd
OSV	CVE-2021-20081	10 Jun 202112:15	–	osv
Prion	Design/Logic Flaw	10 Jun 202112:15	–	prion
RedhatCVE	CVE-2021-20081	22 May 202518:16	–	redhatcve

NVD

Node

zohocorp manageengine_servicedesk_plusRange<11.2

zohocorp manageengine_servicedesk_plusMatch11.2-

zohocorp manageengine_servicedesk_plusMatch11.2build11201

zohocorp manageengine_servicedesk_plusMatch11.2build11202

zohocorp manageengine_servicedesk_plusMatch11.2build11203

zohocorp manageengine_servicedesk_plusMatch11.2build11204

AND

microsoft windowsMatch-

[
  {
    "product": "ManageEngine ServiceDesk Plus",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Before 11205"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2021-22