Lucene search
MitreCVELIST:CVE-2019-12252HistoryMay 21, 2019 - 5:24 p.m.
CVE-2019-12252
2019-05-2117:24:18
mitre
www.cve.org
3
EPSS
0.006
Percentile
78.7%
In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail¬ifyTo=SOLFORWARD&id= substring.
Related
prion
prion
Design/Logic Flaw
2019-05-21 18:29:00
cve
cve
CVE-2019-12252
2019-05-21 18:29:00
zdt
zdt
packetstorm
packetstorm
Zoho ManageEngine ServiceDesk Plus Privilege Escalation
2019-05-22 00:00:00
exploitdb
exploitdb
Zoho ManageEngine ServiceDesk Plus < 10.5 - Improper Access Restrictions
2019-05-22 00:00:00
exploitpack
exploitpack
Zoho ManageEngine ServiceDesk Plus 10.5 - Improper Access Restrictions
2019-05-22 00:00:00
nvd
nvd
CVE-2019-12252
2019-05-21 18:29:00