First published: Tue Jun 29 2021(Updated: )
Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Zohocorp Manageengine Servicedesk Plus | =10.5 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | <10.5 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10500 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10501 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10502 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10503 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10504 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10505 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10506 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10507 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10508 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10509 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10510 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10511 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10512 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10513 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10514 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10515 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10516 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10517 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10518 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10519 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10520 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-31160 is a vulnerability in Zoho ManageEngine ServiceDesk Plus MSP before 10521 that allows an attacker to access internal data.
Zoho ManageEngine ServiceDesk Plus MSP versions 10.5 to 10520 are affected by CVE-2021-31160.
CVE-2021-31160 has a severity rating of 7.5 (high).
To fix CVE-2021-31160, you should update Zoho ManageEngine ServiceDesk Plus MSP to version 10521.
You can find more information about CVE-2021-31160 at the following references: [Reference 1](https://excellium-services.com/cert-xlm-advisory/cve-2021-31160/) and [Reference 2](https://www.manageengine.com/products/service-desk-msp/readme.html#10521).