Security Advisory

CVE-2020-11532

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-08 20:02:24
Last updated 2024-08-04 11:35:13
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. This allows an attacker to bypass authentication for this server and execute all operations in the context of admin user.