CVE-2011-2756

Currently unrated

Key Information:

Vendor
Manageengine
Status
Servicedesk Plus
Vendor
CVE Published:
17 July 2011

Summary

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.

References

http://www.kb.cert.org/vuls/id/543310
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.