CVE-2022-23779

MEDIUM 5.3CVE-2022-23779 · Published 02/03/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
manageengine desktop central zohocorp	`< 10.1.2137.8`	`10.1.2137.8`

Description

Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses.

References

manageengine.com/products/desktop-central/cve-2022-23779.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free