Critical · 9.1 CVE-2023-22964 EUVD-2023-27064GHSA-p357-h73m-92rg

Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication …

Published Jan 20, 2023 · Updated Apr 3, 2025 · Assigned by mitre

Description

Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled.

Advisories 1

WID-SEC-2023-0185 Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jan 23, 2023

References

https://manageengine.com
https://www.manageengine.com/products/service-desk-msp/cve-2023-22964.html

EUVD	v3.1	9.1
CISA-ADP	v3.1	9.1