CVE-2011-2756

2022-10-0316:15:15

mitre

www.cve.org

cve-2011-2756

manageengine

servicedesk plus

filedownload.jsp

vulnerability

authentication bypass

remote attack

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.0%

JSON

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.

References

www.kb.cert.org/vuls/id/543310