Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-05446
HistoryDec 09, 2021 - 12:00 a.m.

Zoho ManageEngine Desktop Central MSP Licensing Issue Vulnerability

2021-12-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
18

0.974 High

EPSS

Percentile

99.9%

ZOHO ManageEngine Desktop Central MSP is a suite of desktop and mobile device management software for MSPs (managed service providers) from ZOHO. The software enables MSPs to remotely manage desktops, servers, and mobile devices in their customer networks and provides differentiated management services for organizations of all sizes.An authorization issue vulnerability exists in Zoho ManageEngine Desktop Central MSP, which stems from an error in the handling of authentication requests. A remote attacker could exploit this vulnerability to bypass the authentication process and execute arbitrary code on the Desktop Central MSP server.