CVE-2020-15594

Summary

CVE-2020-15594 is a newly disclosed vulnerability affecting Zoho Application Control Plus before version 10.0.511. This issue involves an SSRF (Server-Side Request Forgery) vulnerability in the mail gateway configuration feature. Maliciously crafted requests can lead an attacker to initiate scans, revealing open ports and discovering machines on the network where the Application Control Plus instance is deployed. This could potentially allow unauthorized access and data exfiltration. Organizations using this product are advised to update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.