CVE-2021-31160: High severity manageengine servicedesk plus vulnerability
Published Jun 29, 2021
·Updated
Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.
Affected Software
23 affected components
Zohocorp ManageEngine ServiceDesk Plus=10.5
ZohoCorp ManageEngine ServiceDesk Plus MSP<10.5
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10500
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10501
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10502
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10503
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10504
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10505
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10506
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10507
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10508
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10509
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10510
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10511
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10512
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10513
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10514
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10515
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10516
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10517
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10518
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10519
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10520
Event History
Jun 29, 2021
CVE Published
via MITRE·01:10 PM
Data Sourced
via MITRE·01:10 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-31160?
CVE-2021-31160 is a vulnerability in Zoho ManageEngine ServiceDesk Plus MSP before 10521 that allows an attacker to access internal data.
2
What software is affected by CVE-2021-31160?
Zoho ManageEngine ServiceDesk Plus MSP versions 10.5 to 10520 are affected by CVE-2021-31160.
3
What is the severity of CVE-2021-31160?
CVE-2021-31160 has a severity rating of 7.5 (high).
4
How do I fix CVE-2021-31160?
To fix CVE-2021-31160, you should update Zoho ManageEngine ServiceDesk Plus MSP to version 10521.
5
Where can I find more information about CVE-2021-31160?
You can find more information about CVE-2021-31160 at the following references: [Reference 1](https://excellium-services.com/cert-xlm-advisory/cve-2021-31160/) and [Reference 2](https://www.manageengine.com/products/service-desk-msp/readme.html#10521).