Firetruck

CVE-2021-37415

KEV

Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability

View CVE record →
Vendor / Project
Zoho
Product
ManageEngine ServiceDesk Plus (SDP)
Date added
Dec 1, 2021
Due date
Dec 15, 2021
Known ransomware use
Unknown
CWEs
CWE-306

Description

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication

Required action

Apply updates per vendor instructions.

Notes