Description
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API request may, in effect, be executed with the credentials of a user who authenticated in the past.)
Unscored
CVE-2022-36412
EUVD-2022-39124GHSA-wpcm-pg4g-v7c4
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API request may, in effe…
Published Jul 26, 2022 · Updated Aug 3, 2024 · Assigned by mitre