| Package | Affected versions | Patched versions |
|---|---|---|
| automate | ≥ 2020.0, ≤ 2020.7< 2019.12 | 2019.12 |
ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series of attempts. This was patched in 2020.7 and in a hotfix for 2019.12.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free