Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-11511
HistoryNov 08, 2017 - 10:29 p.m.

Design/Logic Flaw

2017-11-0822:29:00
PRIOn knowledge base
www.prio-n.com
2

0.332 Low

EPSS

Percentile

97.1%

The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.

CPENameOperatorVersion
servicedeskeq9.3.9328

0.332 Low

EPSS

Percentile

97.1%

Related for PRION:CVE-2017-11511