Zoho (ManageEngine ServiceDesk Plus (SDP)) Data Breach

Zoho (ManageEngine ServiceDesk Plus (SDP)) experienced a data breach that was reported on December 1, 2021. Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication

Key Facts

Organization
Zoho (ManageEngine ServiceDesk Plus (SDP))
Date Reported
December 1, 2021
Incident Type
unknown
Industry
Technology
Severity Score
5/10
Confidence Level
high

Source

View original source - External link to primary source documentation

Understanding unknown Incidents

Data breaches can result in significant financial, operational, and reputational damage. Organizations should implement defense-in-depth strategies and maintain incident response capabilities.