CVE

CVE-2021-37415

Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability

Zoho · ManageEngine ServiceDesk Plus (SDP)

Date added (CISA)

2021-12-01

Remediation due

2021-12-15

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication