medium5.3

CVE-2022-23779

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone.

Impact

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses.

Affected products

Vendor	Product	Affected versions
Zohocorp	Manageengine Desktop Central	before 10.1.2137.8

Weakness classification

CWE-200

References

NVD record
CVE.org record
https://www.manageengine.com/products/desktop-central/cve-2022-23779.html
https://www.manageengine.com/products/desktop-central/cve-2022-23779.html