Researchers Warn Against Zoho ManageEngine “Spray and Pray” Attacks

Security researchers issued a warning about a critically-rated pre-authentication remote code execution (RCE) vulnerability, CVE-2022-47966, in Zoho ManageEngine products – including ServiceDesk Plus 14003 and Endpoint Central version 10.1.2888.10 – here’s what you need to know. What is the situation? According to researchers, an adversary could exploit the Zoho ManageEngine vulnerability if the Security Assertion Markup Language (SAML) single-sign-on is ... Read More

The post Researchers Warn Against Zoho ManageEngine “Spray and Pray” Attacks appeared first on Nuspire.

The …

adversary attacks authentication blog code code execution cve cve-2022-47966 endpoint exploit language manageengine markup products rce remote code remote code execution researchers saml security security researchers sign single spray version vulnerability warning what is zoho zoho manageengine