CVE-2020-29658

Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to Privilege Escalation.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-03-05

Last modified

2024-08-04

Affected products

• Manageengine Applications Control Plus (Zohocorp)

References

• https://www.manageengine.com/application-control/knowledge-base/privilege-escalation-vulnerability-open-SSL.html