CVE-2022-23779

Publication date

2022-03-02 14:31:30

Family

mitre

State

PUBLISHED

Description

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses.