ACTIEF MISBRUIKT
CVE-2021-44515: Zoho Desktop Central Authentication Bypass Vulnerability
| Leverancier | Zoho |
|---|---|
| Product | Desktop Central |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 10 dec 2021 |
| CISA-deadline (Amerikaanse overheid) | 24 dec 2021 |
Vereiste actie (tekst van CISA, Engels)
Apply updates per vendor instructions.
Beschrijving (NVD, Engels)
Zoho Desktop Central contains an authentication bypass vulnerability that could allow an attacker to execute arbitrary code in the Desktop Central MSP server.
BRONNEN
Andere lekken bij Zoho
- CVE-2022-28810: Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
- CVE-2022-47966: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- CVE-2022-35405: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- CVE-2021-44077: Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
- CVE-2021-37415: Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.