FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.
CPE | Name | Operator | Version |
---|---|---|---|
servicedesk_plus | eq | 8.0 |