Authentication Issue in Zoho ManageEngine Desktop Central
CVE-2020-28050

9.1CRITICAL

Key Information:

Vendor

Zohocorp
Status
Manageengine Desktop Central
Vendor
CVE Published:
5 March 2021

What is CVE-2020-28050?

Zoho ManageEngine Desktop Central prior to build 10.0.647 is affected by a vulnerability that allows multiple agents to utilize a single authentication secret for communication with the server, posing security risks due to potential unauthorized access. This issue undermines the integrity of agent-server interactions, making it crucial for users to update to the latest build to mitigate these vulnerabilities.

References

https://www.manageengine.com/products/desktop-central/fix...
x_refsource_CONFIRM
https://www.manageengine.com/products/desktop-central/cve...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.