PT-2011-4065 · Manageengine · Manageengine Servicedesk Plus

Keith Lee Yong Ming · Publicado 2011-07-17 · Atualizado 2011-07-19 · CVE-2011-2755

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus versions prior to 8.0 Build 8012

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files.

Recommendations For versions prior to 8.0 Build 8012, update to Build 8012 or later to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-2755

Produtos afetados

Manageengine Servicedesk Plus

Referências · 5

• 🔥 https://exploit-db.com/exploits/17503 · Exploit
• 🔥 https://exploit-db.com/exploits/17442 · Exploit
• 🔥 https://exploit-db.com/exploits/17437 · Exploit
• http://kb.cert.org/vuls/id/543310 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2755 · Nota de Segurança