CVE-2021-20081
First published: Thu Jun 10 2021(Updated: )
Credit: vulnreport@tenable.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zohocorp Manageengine Servicedesk Plus | <11.2 | |
| Zohocorp Manageengine Servicedesk Plus | =11.2 | |
| Zohocorp Manageengine Servicedesk Plus | =11.2-build11201 | |
| Zohocorp Manageengine Servicedesk Plus | =11.2-build11202 | |
| Zohocorp Manageengine Servicedesk Plus | =11.2-build11203 | |
| Zohocorp Manageengine Servicedesk Plus | =11.2-build11204 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-20081?
CVE-2021-20081 is a vulnerability in ManageEngine ServiceDesk Plus before version 11205 that allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.
How severe is CVE-2021-20081?
CVE-2021-20081 has a severity rating of 7.2 (Critical).
What software is affected by CVE-2021-20081?
ManageEngine ServiceDesk Plus versions up to 11.2 are affected by CVE-2021-20081.
How can an attacker exploit CVE-2021-20081?
An attacker can exploit CVE-2021-20081 by sending disallowed inputs to the vulnerable ManageEngine ServiceDesk Plus software, allowing them to execute arbitrary commands with SYSTEM privileges.
Is there a fix for CVE-2021-20081?
Yes, upgrading to version 11205 of ManageEngine ServiceDesk Plus will fix the CVE-2021-20081 vulnerability.
- collector/nvd-index
- vendor/zohocorp
- product/manageengine servicedesk plus
- canonical/zohocorp manageengine servicedesk plus
- vendor/microsoft
- product/windows
- canonical/microsoft windows