CVE-2020-35682

zohocorp manageengine servicedesk plus

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-35682

Katalog CVE

CVSS 8.8 · High EPSS 7,2%

Kerentanan Incorrect Authorization pada zohocorp manageengine servicedesk plus. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML login).

Rincian

Terbit di NVD
13 Maret 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-863: Incorrect Authorization
EPSS (30 hari)
7,2% peluang dieksploitasi; lebih tinggi dari 94,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zohocorp manageengine servicedesk plus Semua versi sebelum 11.1
zohocorp manageengine servicedesk plus Versi 11.1 11100
zohocorp manageengine servicedesk plus Versi 11.1 11101
zohocorp manageengine servicedesk plus Versi 11.1 11102
zohocorp manageengine servicedesk plus Versi 11.1 11103
zohocorp manageengine servicedesk plus Versi 11.1 11104
zohocorp manageengine servicedesk plus Versi 11.1 11105
zohocorp manageengine servicedesk plus Versi 11.1 11106
zohocorp manageengine servicedesk plus Versi 11.1 11107
zohocorp manageengine servicedesk plus Versi 11.1 11108
zohocorp manageengine servicedesk plus Versi 11.1 11109
zohocorp manageengine servicedesk plus Versi 11.1 11110
zohocorp manageengine servicedesk plus Versi 11.1 11111
zohocorp manageengine servicedesk plus Versi 11.1 11112
zohocorp manageengine servicedesk plus Versi 11.1 11113
zohocorp manageengine servicedesk plus Versi 11.1 11114
zohocorp manageengine servicedesk plus Versi 11.1 11115
zohocorp manageengine servicedesk plus Versi 11.1 11116
zohocorp manageengine servicedesk plus Versi 11.1 11117
zohocorp manageengine servicedesk plus Versi 11.1 11118
zohocorp manageengine servicedesk plus Versi 11.1 11119
zohocorp manageengine servicedesk plus Versi 11.1 11120
zohocorp manageengine servicedesk plus Versi 11.1 11121
zohocorp manageengine servicedesk plus Versi 11.1 11122
zohocorp manageengine servicedesk plus Versi 11.1 11123
zohocorp manageengine servicedesk plus Versi 11.1 11124
zohocorp manageengine servicedesk plus Versi 11.1 11125
zohocorp manageengine servicedesk plus Versi 11.1 11126
zohocorp manageengine servicedesk plus Versi 11.1 11127
zohocorp manageengine servicedesk plus Versi 11.1 11128
zohocorp manageengine servicedesk plus Versi 11.1 11129
zohocorp manageengine servicedesk plus Versi 11.1 11130
zohocorp manageengine servicedesk plus Versi 11.1 11131
zohocorp manageengine servicedesk plus Versi 11.1 11132
zohocorp manageengine servicedesk plus Versi 11.1 11133

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.