high7.5
CVE-2021-31160
Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.
Impact
Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Servicedesk Plus | Version 10.5 |
| Zohocorp | Manageengine Servicedesk Plus Msp | before 10.5 Version 10.5 |
References
- NVD record
- CVE.org record
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-31160
- https://excellium-services.com/cert-xlm-advisory/cve-2021-31160/
- https://www.manageengine.com/products/service-desk-msp/readme.html#10521
- https://excellium-services.com/cert-xlm-advisory/cve-2021-31160/
- https://www.manageengine.com/products/service-desk-msp/readme.html#10521