critical9.8
CVE-2022-36412
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass.
Impact
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API request may, in effect, be executed with the credentials of a user who authenticated in the past.)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Supportcenter Plus | Version 11.0 |