medium5.4
CVE-2023-34197
Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerabili…
Impact
Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Servicedesk Plus | before 14.2 Version 14.2 |
| Zohocorp | Manageengine Servicedesk Plus Msp | before 14.2 Version 14.2 |
| Zohocorp | Manageengine Supportcenter Plus | before 14.2 Version 14.2 |