CVE-2023-22964

Published: Jan 20, 2023Modified: Apr 3, 2025

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled.

Affected (15)

Products: Zohocorp: Manageengine Servicedesk Plus Msp

Zohocorp

1 product

Manageengine Servicedesk Plus Msp

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10600
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10601
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10602
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10603
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10604
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10605
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10606
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10607
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10608
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10609
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.6 10610
Zohocorp Manageengine Servicedesk Plus Msp	Version 13.0 13000
Zohocorp Manageengine Servicedesk Plus Msp	Version 13.0 13001
Zohocorp Manageengine Servicedesk Plus Msp	Version 13.0 13002
Zohocorp Manageengine Servicedesk Plus Msp	Version 13.0 13003