NetSight
IP …
critical9.8

CVE-2019-8395

An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a requ…

Impact

An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request.

Affected products

VendorProductAffected versions
ZohocorpManageengine Servicedesk Plus
before 10.0

Weakness classification

CWE-22CWE-706

References