CVE-2011-2756

2011-07-1720:00:00

mitre

www.cve.org

cve-2011-2756

manageengine

servicedesk plus

filedownload.jsp

vulnerability

authentication bypass

remote attack

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

74.4%

JSON

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.

References

www.kb.cert.org/vuls/id/543310