CVE-2021-41827

Description

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive.

References

https://www.manageengine.com/remote-desktop-management/hotfix-readme.html

https://medium.com/nestedif/vulnerability-disclosure-hardcoded-keys-password-zoho-r-a-p-318aa9bba2e

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3