ManageEngine ServiceDesk Plus MSP < 10.6 Build 10611 / 13.0 Build 13004

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 10.6 Build 10611, 13.0 Build 13004. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspcve-2023-22964 advisory. - Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x...

CVE-2023-22964

creationtimestamp| type| source ---|---|--- 2023-01-20 20:22:56+00:00| seen| https://t.me/cibsecurity/56778...

CVE-2023-22964

Zoho ManageEngine ServiceDesk Plus MSP contains an authentication bypass vulnerability (CVE-2023-22964) when LDAP authentication is enabled. Affected versions are MSP before 10.6 Build 10611 and 13.x before 13.0 Build 13004. The root cause is an LDAP authentication flaw that allows bypassing auth...