vendor:
ServiceDesk Plus
by:
p0z
3,3
CVSS
LOW
Improper Privilege Management
264
CWE
Product Name: ServiceDesk Plus
Affected Version From: 9.2 Build 9207
Affected Version To: 9.2 Build 9228
Patch Exists: YES
Related CWE: N/A
CPE: a:manageengine:servicedesk_plus
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2016
ManageEngine ServiceDesk Plus Low Privileged User View All Tickets
A user with low privileged can be able view all requests/tickets (include attachments).
Mitigation:
Ensure that users with low privileges are not able to view sensitive data.