CVE-2023-22964

Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2023-01-20

Last modified

2025-04-03

Weaknesses

CWE-287

Affected products

• Manageengine Servicedesk Plus Msp (Zohocorp)

References

• https://manageengine.com
• https://www.manageengine.com/products/service-desk-msp/cve-2023-22964.html