CVE-2011-2756

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.
References
Link Resource
http://www.kb.cert.org/vuls/id/543310 US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:manageengine:servicedesk_plus:8.0:*:*:*:*:*:*:*

Information

Published : 2011-07-17 13:55

Updated : 2011-07-18 21:00


NVD link : CVE-2011-2756

Mitre link : CVE-2011-2756


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

manageengine

  • servicedesk_plus