CVE-2020-29658 - Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to Privilege Escalation

CRITICAL

Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to Privilege Escalation

Published Mar 5, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 4.10%

Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to Privilege Escalation.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-22016		Advisory
https://www.manageengine.com/application-control/knowledge-base/privilege-escalation-vulnerability-open-SSL.html		x_refsource_MISCPatchVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 5, 2021

Updated Aug 4, 2024

Reserved Dec 9, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Mar 5, 2021

Updated Aug 4, 2024

Exploited since n/a