CVE-2020-28050 - Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server

CRITICAL

Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server

Published Mar 5, 2021

9.1

CRITICAL

CVSS 3.1

EPSS 5.13%

Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server.

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20540		Advisory
https://www.manageengine.com/products/desktop-central/cve-2020-28050.html		x_refsource_CONFIRMVendor Advisory
https://www.manageengine.com/products/desktop-central/fixing-multiple-vulnerabilities.html		x_refsource_CONFIRMVendor Advisory