CVE-2020-35682

Summary

CVE	CVE-2020-35682
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-03-13 19:15:00 UTC
Updated	2021-03-18 20:28:00 UTC
Description	Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML login).

Risk And Classification

Problem Types: CWE-863

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Zohocorp	Manageengine Servicedesk Plus	All	All	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11100	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11101	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11102	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11103	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11104	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11105	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11106	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11107	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11108	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11109	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11110	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11111	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11112	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11113	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11114	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11115	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11116	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11117	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11118	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11119	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11120	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11121	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11122	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11123	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11124	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11125	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11126	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11127	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11128	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11129	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11130	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11131	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11132	All	All
Application	Zohocorp	Manageengine Servicedesk Plus	11.1	11133	All	All

References

Reference	Source	Link	Tags
www.manageengine.com/products/service-desk/on-premises/readme.html	MISC	www.manageengine.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.