Client Application Firewall
ManageEngine.ServiceDesk.CVE-2021-37415.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in Zoho Corporation ServiceDesk Plus.
The vulnerability is due to an error in normalizing REST API URLs before applying security filtering. A remote attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could allow the attacker to bypass authentication.
Affected Products
Zoho Corporation ServiceDesk Plus prior to 11302
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.manageengine.com/products/service-desk/on-premises/readme.html#11302
Version Updates
| ID | 51004 |
| Created | Dec 10, 2021 |
| Updated | Dec 04, 2024 |
| CVE ID | |
| Risk |
|
| Known Exploited | Yes |
| Exploit Prediction Score | 91.97% |
| Default Action | drop |
| Affected OS | Windows, Linux |
| Affected App | Other |
| Profile Type | Permission/Privilege/Access Control |