Authentication flaw

2021-12-2015:15:00

PRIOn knowledge base

www.prio-n.com

9.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.

CPENameOperatorVersion
manageengine_servicedesk_plus_mspeq10.5 10519
manageengine_servicedesk_plus_mspeq10.5 10515
manageengine_servicedesk_plus_mspeq10.5 10516
manageengine_servicedesk_plus_mspeq10.5 10517
manageengine_servicedesk_plus_mspeq10.5 10518
manageengine_servicedesk_plus_mspeq10.5 10507
manageengine_servicedesk_plus_mspeq10.5 10508
manageengine_servicedesk_plus_mspeq10.5 10509
manageengine_servicedesk_plus_mspeq10.5 10510
manageengine_servicedesk_plus_mspeq10.5 10511

Name	Operator	Version
manageengine_servicedesk_plus_msp	eq	10.5 10519
manageengine_servicedesk_plus_msp	eq	10.5 10515
manageengine_servicedesk_plus_msp	eq	10.5 10516
manageengine_servicedesk_plus_msp	eq	10.5 10517
manageengine_servicedesk_plus_msp	eq	10.5 10518
manageengine_servicedesk_plus_msp	eq	10.5 10507
manageengine_servicedesk_plus_msp	eq	10.5 10508
manageengine_servicedesk_plus_msp	eq	10.5 10509
manageengine_servicedesk_plus_msp	eq	10.5 10510
manageengine_servicedesk_plus_msp	eq	10.5 10511

Rows per page:

1-10 of 351

References

pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerabilities-in-servicedesk-plus-msp-that-could-lead-to-remote-code-execution