CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2021-44675

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0100%
EPSS Percentile17.82th
Published2021年12月20日
Last Modified2024年11月21日

Vulnerability Description

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.

Affected Platforms (CPE)

📦
Zohocorp

Manageengine Servicedesk Plus Msp

<= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5

References & Advisories

🔗 https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerabilities-in-servicedesk-plus-msp-that-could-lead-to-remote-code-execution
🔗 https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerabilities-in-servicedesk-plus-msp-that-could-lead-to-remote-code-execution

相關漏洞威脅

CVE-2021-315319.8

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).

CVE-2021-440779.8

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulner...

CVE-2021-311607.5

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.

CVE-2021-315307.5

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.