CVE-2020-11532

Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. This allows an attacker to bypass authentication for this server and execute all operations in the context of admin user.
Configurations

Configuration 1

cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:*:*:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*

Information

Published : 2020-05-08 09:15

Updated : 2021-07-21 11:39


NVD link : CVE-2020-11532

Mitre link : CVE-2020-11532

CWE
CWE-1188

Insecure Default Initialization of Resource