CVE-2022-23779

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone

published March 2, 2022

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13229 · 96.4th percentile
Published
2022-03-02T14:31Z
EPSS history
Timeline
  • 02 MAR 14:31Z
    Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone
    cvelistv5