PT-2019-13953 · Zoho · Zoho Manageengine Servicedesk Plus

Published 2019-08-14 · Updated 2022-04-18 · CVE-2019-15046

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus version 10 before 10509

Description The issue allows unauthenticated sensitive information leakage during Fail Over Service (FOS) replication.

Recommendations For Zoho ManageEngine ServiceDesk Plus version 10 before 10509, update to version 10509 or later to resolve the issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-15046

Affected Products

Zoho Manageengine Servicedesk Plus

References · 6

• 🔥 http://packetstormsecurity.com/files/154183/Zoho-Corporation-ManageEngine-ServiceDesk-Plus-Information-Disclosure.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Aug/17 · Exploit
• 🔥 https://seclists.org/bugtraq/2019/Aug/37 · Exploit
• https://osv.dev/vulnerability/CVE-2019-15046 · Vendor Advisory
• https://manageengine.com/products/service-desk/readme.html#10509 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15046 · Security Note