CVE-2021-31530: High severity zohocorp manageengine servicedesk plus msp vulnerability
Published Jun 29, 2021
·Updated
Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.
Affected Software
24 affected components
ZohoCorp ManageEngine ServiceDesk Plus MSP<10.5
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10500
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10501
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10502
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10503
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10504
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10505
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10506
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10507
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10508
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10509
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10510
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10511
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10512
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10513
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10514
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10515
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10516
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10517
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10518
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10519
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10520
ZohoCorp ManageEngine ServiceDesk Plus MSP=10.5-10521
Event History
Jun 29, 2021
CVE Published
via MITRE·01:11 PM
Data Sourced
via MITRE·01:11 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2021-31530?
CVE-2021-31530 is a vulnerability in Zoho ManageEngine ServiceDesk Plus MSP before version 10522 that allows for information disclosure.
2
What is the severity of CVE-2021-31530?
CVE-2021-31530 has a severity score of 7.5 (high).
3
How does CVE-2021-31530 affect Zoho ManageEngine ServiceDesk Plus MSP?
CVE-2021-31530 affects Zoho ManageEngine ServiceDesk Plus MSP versions up to and including 10521.
4
How can I fix CVE-2021-31530?
To fix CVE-2021-31530, it is recommended to update Zoho ManageEngine ServiceDesk Plus MSP to version 10522 or higher.
5
Where can I find more information about CVE-2021-31530?
More information about CVE-2021-31530 can be found at the following references: [Link 1](https://excellium-services.com/cve-2021-31530/) and [Link 2](https://www.manageengine.com/products/service-desk-msp/readme.html#10522).