CVE-2020-28050
First published: Fri Mar 05 2021(Updated: )
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zohocorp Manageengine Desktop Central | <10.0.647 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-28050?
CVE-2020-28050 is a vulnerability in Zoho ManageEngine Desktop Central that allows a single authentication secret from multiple agents to communicate with the server.
What is the severity of CVE-2020-28050?
The severity of CVE-2020-28050 is critical with a CVSS score of 9.1.
Which version of Zoho ManageEngine Desktop Central is affected by CVE-2020-28050?
Zoho ManageEngine Desktop Central before build 10.0.647 is affected by CVE-2020-28050.
How can I fix CVE-2020-28050?
To fix CVE-2020-28050, you need to upgrade to Zoho ManageEngine Desktop Central build 10.0.647 or later.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2020-28050?
CVE-2020-28050 is associated with CWE-287.
- collector/nvd-index
- vendor/zohocorp
- canonical/zohocorp manageengine desktop central