high8.8
CVE-2016-4889
ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to un…
Impact
ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Servicedesk Plus | through 8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN89726415/index.html
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000170.html
- http://www.securityfocus.com/bid/93215
- https://www.manageengine.com/products/service-desk/readme-9.0.html
- http://jvn.jp/en/jp/JVN89726415/index.html
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000170.html
- http://www.securityfocus.com/bid/93215
- https://www.manageengine.com/products/service-desk/readme-9.0.html