CVE-2020-11532
40Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 77%
exploitation probability
77%top 1% of all CVEs
observed exploitation
nono source reports it
Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. This allows an attacker to bypass authentication for this server and execute all operations in the context of admin user.
Affected products
n/a · n/a