CVE-2020-8509

Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-03-30

Last modified

2024-08-04

Weaknesses

CWE-306

Affected products

• Manageengine Desktop Central (Zohocorp)

References

• https://www.manageengine.com/products/desktop-central/unauthenticated-servlet-access.html