CVE-2011-2757

2022-10-0316:15:17

mitre

www.cve.org

manageengine servicedesk

directory traversal

remote attackers

arbitrary files

filedownload.jsp

6.6 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.1%

JSON

Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a … (dot dot) in the FILENAME parameter. NOTE: this might overlap the US-CERT VU#543310 issue.

References

www.exploit-db.com/exploits/17503/