Authentication flaw

2023-01-2017:15:00

PRIOn knowledge base

www.prio-n.com

zoho

manageengine

servicedesk

authentication

bypass

ldap

vulnerability

9.2 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.3%

JSON

Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled.

CPENameOperatorVersion
manageengine_servicedesk_plus_mspeq10.6 10600
manageengine_servicedesk_plus_mspeq10.6 10601
manageengine_servicedesk_plus_mspeq10.6 10602
manageengine_servicedesk_plus_mspeq10.6 10603
manageengine_servicedesk_plus_mspeq10.6 10604
manageengine_servicedesk_plus_mspeq10.6 10605
manageengine_servicedesk_plus_mspeq10.6 10607
manageengine_servicedesk_plus_mspeq10.6 10608
manageengine_servicedesk_plus_mspeq10.6 10606
manageengine_servicedesk_plus_mspeq10.6 10609

Name	Operator	Version
manageengine_servicedesk_plus_msp	eq	10.6 10600
manageengine_servicedesk_plus_msp	eq	10.6 10601
manageengine_servicedesk_plus_msp	eq	10.6 10602
manageengine_servicedesk_plus_msp	eq	10.6 10603
manageengine_servicedesk_plus_msp	eq	10.6 10604
manageengine_servicedesk_plus_msp	eq	10.6 10605
manageengine_servicedesk_plus_msp	eq	10.6 10607
manageengine_servicedesk_plus_msp	eq	10.6 10608
manageengine_servicedesk_plus_msp	eq	10.6 10606
manageengine_servicedesk_plus_msp	eq	10.6 10609