CVE-2023-35785

CVE-2023-35785 is a two-factor authentication (2FA) bypass vulnerability affecting numerous Zoho ManageEngine products, including Active Directory 360, ADAudit Plus, and ServiceDesk Plus, across various versions. An attacker can exploit this flaw to bypass 2FA using specific TOTP authenticators, provided they already possess a valid username and password for the target system. Rated with a CVSS score of 8.1 (HIGH), this vulnerability has a network attack vector and high impact on confidentiality, integrity, and availability. While the attack complexity is high due to the prerequisite of valid credentials, no user interaction is required once those are obtained. Currently, there is no evidence of active exploitation in the wild, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. The vulnerability has also received minimal community discussion and media coverage, suggesting low awareness and a lack of widespread attention.