PT-2022-23356 · Zoho · Zoho Manageengine Supportcenter Plus
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine SupportCenter Plus versions prior to 11023
Description
The issue concerns authentication bypass in V3 API requests. This means an API request can be executed with the credentials of a user who authenticated in the past.
Recommendations
For versions prior to 11023, update to version 11023 or later to resolve the authentication bypass issue in V3 API requests.
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Zoho Manageengine Supportcenter Plus