CVE-2020-8422

CVE-2020-8422 affects Zoho ManageEngine Remote Access Plus (Credential Manager) before 10.0.450. The root cause is an authorization issue that lets a Guest‑role user enumerate credential metadata (name, type, username, domain/workgroup, description) for remote machines; passwords are not exposed....