PT-2019-13953 · Zoho · Zoho Manageengine Servicedesk Plus

Publicado 2019-08-14 · Atualizado 2022-04-18 · CVE-2019-15046

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus version 10 before 10509

Description The issue allows unauthenticated sensitive information leakage during Fail Over Service (FOS) replication.

Recommendations For Zoho ManageEngine ServiceDesk Plus version 10 before 10509, update to version 10509 or later to resolve the issue.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2019-15046

Produtos afetados

Zoho Manageengine Servicedesk Plus

Referências · 6

• 🔥 http://packetstormsecurity.com/files/154183/Zoho-Corporation-ManageEngine-ServiceDesk-Plus-Information-Disclosure.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Aug/17 · Exploit
• 🔥 https://seclists.org/bugtraq/2019/Aug/37 · Exploit
• https://osv.dev/vulnerability/CVE-2019-15046 · Aviso do Fabricante
• https://manageengine.com/products/service-desk/readme.html#10509 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15046 · Nota de Segurança