CVE-2021-44650

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine M365 Manager Plus versions prior to Build 4419

Description The issue allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.

Recommendations For versions prior to Build 4419, update to Build 4419 or later to resolve the issue. As a temporary workaround, consider restricting access to the Admin ProxySettings and Tenant ProxySettings components until a patch is applied. Avoid using these components for updating proxy settings until the issue is resolved.