PT-2011-4065 · Manageengine · Manageengine Servicedesk Plus

Keith Lee Yong Ming · Published 2011-07-17 · Updated 2011-07-19 · CVE-2011-2755

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus versions prior to 8.0 Build 8012

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files.

Recommendations For versions prior to 8.0 Build 8012, update to Build 8012 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-2755

Affected Products

Manageengine Servicedesk Plus

References · 5

• 🔥 https://exploit-db.com/exploits/17503 · Exploit
• 🔥 https://exploit-db.com/exploits/17442 · Exploit
• 🔥 https://exploit-db.com/exploits/17437 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-2755 · Security Note
• http://kb.cert.org/vuls/id/543310 · Note