CVE:CVE-2020-14048
CNNVD:CNNVD-202006-973
ZOHO ManageEngine ServiceDesk Plus是美国卓豪（ZOHO）公司的一套基于ITIL架构的IT服务管理软件（ITSM）。该软件集成了事件管理、问题管理、资产管理、IT项目管理、采购与合同管理等功能模块。
Zoho ManageEngine ServiceDesk Plus 11.1 build 11115之前版本中存在安全漏洞。远程攻击者可利用该漏洞更改已部署代理的安装状态。
solution:Upgrade zohocorp manageengine_servicedesk_plus to a higher version than 8.2,8.2:8201,8.2:8202,8.2:8203,8.2:8204,8.2:8205,8.2:8206,8.2:8207,8.2:8208,8.2:8209,8.2:8210,8.2:8211,8.2:8212,8.2:8213,8.2:8214,8.2:8215,8.2:8216,8.2:8217,9.0,9.0:9000,9.0:9001,9.0:9002,9.0:9003,9.0:9004,9.0:9005,9.0:9006,9.0:9007,9.0:9008,9.0:9009,9.0:9010,9.0:9011,9.0:9012,9.0:9013,9.0:9014,9.0:9016,9.0:9017,9.0:9018,9.0:9019,9.0:9020,9.0:9021,9.0:9022,9.0:9023,9.0:9024,9.0:9025,9.0:9026,9.0:9027,9.0:9028,9.0:9029,9.0:9030,9.0:9031,9.0:9032,9.0:9033,9.0:9034,9.0:9035,9.0:9036,9.0:9037,9.0:9038,9.0:9039,9.0:9040,9.0:9041,9.0:9042,9.0:9043,9.0:9044,9.0:9045,9.0:9046,9.0:9047,9.0:9048,9.0:9049,9.1,9.1:9100,9.1:9101,9.1:9102,9.1:9103,9.1:9104,9.1:9105,9.1:9106,9.1:9107,9.1:9108,9.1:9109,9.1:9110,9.1:9111,9.1:9112,9.1:9113,9.1:9114,9.1:9115,9.1:9116,9.1:9117,9.1:9118,9.1:9119,9.1:9120,9.1:9121,9.2,9.2:9200,9.2:9201,9.2:9202,9.2:9203,9.2:9204,9.2:9205,9.2:9206,9.2:9207,9.2:9208,9.2:9209,9.2:9210,9.2:9211,9.2:9212,9.2:9213,9.2:9214,9.2:9215,9.2:9216,9.2:9217,9.2:9218,9.2:9219,9.2:9220,9.2:9221,9.2:9222,9.2:9223,9.2:9224,9.2:9225,9.2:9226,9.2:9227,9.2:9228,9.2:9229,9.2:9230,9.2:9231,9.2:9232,9.2:9233,9.2:9234,9.2:9235,9.2:9236,9.2:9237,9.2:9238,9.2:9239,9.2:9240,9.2:9241,9.2:9242,9.3,9.3:9300,9.3:9301,9.3:9302,9.3:9303,9.3:9304,9.3:9305,9.3:9306,9.3:9307,9.3:9308,9.3:9309,9.3:9310,9.3:9311,9.3:9312,9.3:9313,9.3:9314,9.3:9315,9.3:9316,9.3:9317,9.3:9318,9.3:9319,9.3:9320,9.3:9321,9.3:9322,9.3:9323,9.3:9324,9.3:9325,9.3:9326,9.3:9327,9.3:9328,9.3:9329,9.3:9330,9.3:9331,9.3:9332,9.3:9333,9.3:9334,9.3:9335,9.3:9336,9.4,9.4:9400,9.4:9401,9.4:9402,9.4:9403,9.4:9404,9.4:9405,9.4:9406,9.4:9407,9.4:9408,9.4:9409,9.4:9410,9.4:9411,9.4:9412,9.4:9413,9.4:9414,9.4:9415,9.4:9416,9.4:9417,9.4:9418,9.4:9419,9.4:9420,9.4:9421,9.4:9422,9.4:9423,9.4:9424,9.4:9425,9.4:9426,9.4:9427,10.0.0,10.0.0:10000,10.0.0:10001,10.0.0:10002,10.0.0:10003,10.0.0:10004,10.0.0:10005,10.0.0:10006,10.0.0:10007,10.0.0:10008,10.0.0:10009,10.0.0:10010,10.0.0:10011,10.0.0:10012,10.0.0:10013,10.0.0:10014,10.0.0:10015,10.0.0:10016,10.0.0:10017,10.0.0:10018,10.0.0:10019,10.0.0:10020,10.0.0:10021,10.5,10.5:10500,10.5:10501,10.5:10502,10.5:10503,10.5:10504,10.5:10505,10.5:10506,10.5:10507,10.5:10508,10.5:10509,10.5:10510,10.5:10511,10.5:10512,10.5:10513,10.5:10514,11.0,11.0:11000,11.0:11001,11.0:11002,11.0:11003,11.0:11004,11.0:11005,11.0:11006,11.0:11007,11.0:11008,11.0:11009,11.0:11010,11.1,11.1:11100,11.1:11101,11.1:11102,11.1:11103,11.1:11104,11.1:11105,11.1:11106,11.1:11107,11.1:11108,11.1:11109,11.1:11110,11.1:11111,11.1:11112,11.1:11113,11.1:11114,and avoid the version 8.2,8.2:8201,8.2:8202,8.2:8203,8.2:8204,8.2:8205,8.2:8206,8.2:8207,8.2:8208,8.2:8209,8.2:8210,8.2:8211,8.2:8212,8.2:8213,8.2:8214,8.2:8215,8.2:8216,8.2:8217,9.0,9.0:9000,9.0:9001,9.0:9002,9.0:9003,9.0:9004,9.0:9005,9.0:9006,9.0:9007,9.0:9008,9.0:9009,9.0:9010,9.0:9011,9.0:9012,9.0:9013,9.0:9014,9.0:9016,9.0:9017,9.0:9018,9.0:9019,9.0:9020,9.0:9021,9.0:9022,9.0:9023,9.0:9024,9.0:9025,9.0:9026,9.0:9027,9.0:9028,9.0:9029,9.0:9030,9.0:9031,9.0:9032,9.0:9033,9.0:9034,9.0:9035,9.0:9036,9.0:9037,9.0:9038,9.0:9039,9.0:9040,9.0:9041,9.0:9042,9.0:9043,9.0:9044,9.0:9045,9.0:9046,9.0:9047,9.0:9048,9.0:9049,9.1,9.1:9100,9.1:9101,9.1:9102,9.1:9103,9.1:9104,9.1:9105,9.1:9106,9.1:9107,9.1:9108,9.1:9109,9.1:9110,9.1:9111,9.1:9112,9.1:9113,9.1:9114,9.1:9115,9.1:9116,9.1:9117,9.1:9118,9.1:9119,9.1:9120,9.1:9121,9.2,9.2:9200,9.2:9201,9.2:9202,9.2:9203,9.2:9204,9.2:9205,9.2:9206,9.2:9207,9.2:9208,9.2:9209,9.2:9210,9.2:9211,9.2:9212,9.2:9213,9.2:9214,9.2:9215,9.2:9216,9.2:9217,9.2:9218,9.2:9219,9.2:9220,9.2:9221,9.2:9222,9.2:9223,9.2:9224,9.2:9225,9.2:9226,9.2:9227,9.2:9228,9.2:9229,9.2:9230,9.2:9231,9.2:9232,9.2:9233,9.2:9234,9.2:9235,9.2:9236,9.2:9237,9.2:9238,9.2:9239,9.2:9240,9.2:9241,9.2:9242,9.3,9.3:9300,9.3:9301,9.3:9302,9.3:9303,9.3:9304,9.3:9305,9.3:9306,9.3:9307,9.3:9308,9.3:9309,9.3:9310,9.3:9311,9.3:9312,9.3:9313,9.3:9314,9.3:9315,9.3:9316,9.3:9317,9.3:9318,9.3:9319,9.3:9320,9.3:9321,9.3:9322,9.3:9323,9.3:9324,9.3:9325,9.3:9326,9.3:9327,9.3:9328,9.3:9329,9.3:9330,9.3:9331,9.3:9332,9.3:9333,9.3:9334,9.3:9335,9.3:9336,9.4,9.4:9400,9.4:9401,9.4:9402,9.4:9403,9.4:9404,9.4:9405,9.4:9406,9.4:9407,9.4:9408,9.4:9409,9.4:9410,9.4:9411,9.4:9412,9.4:9413,9.4:9414,9.4:9415,9.4:9416,9.4:9417,9.4:9418,9.4:9419,9.4:9420,9.4:9421,9.4:9422,9.4:9423,9.4:9424,9.4:9425,9.4:9426,9.4:9427,10.0.0,10.0.0:10000,10.0.0:10001,10.0.0:10002,10.0.0:10003,10.0.0:10004,10.0.0:10005,10.0.0:10006,10.0.0:10007,10.0.0:10008,10.0.0:10009,10.0.0:10010,10.0.0:10011,10.0.0:10012,10.0.0:10013,10.0.0:10014,10.0.0:10015,10.0.0:10016,10.0.0:10017,10.0.0:10018,10.0.0:10019,10.0.0:10020,10.0.0:10021,10.5,10.5:10500,10.5:10501,10.5:10502,10.5:10503,10.5:10504,10.5:10505,10.5:10506,10.5:10507,10.5:10508,10.5:10509,10.5:10510,10.5:10511,10.5:10512,10.5:10513,10.5:10514,11.0,11.0:11000,11.0:11001,11.0:11002,11.0:11003,11.0:11004,11.0:11005,11.0:11006,11.0:11007,11.0:11008,11.0:11009,11.0:11010,11.1,11.1:11100,11.1:11101,11.1:11102,11.1:11103,11.1:11104,11.1:11105,11.1:11106,11.1:11107,11.1:11108,11.1:11109,11.1:11110,11.1:11111,11.1:11112,11.1:11113,11.1:11114