Lucene search
PRIOn knowledge basePRION:CVE-2017-11512HistoryNov 08, 2017 - 10:29 p.m.
Design/Logic Flaw
2017-11-0822:29:00
PRIOn knowledge base
www.prio-n.com
2
0.972 High
EPSS
Percentile
99.8%
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| servicedesk | eq | 9.3.9328 |
Related
cve
cve
CVE-2017-11512
2017-11-08 22:29:00
nvd
nvd
CVE-2017-11512
2017-11-08 22:29:00
checkpoint_advisories
checkpoint_advisories
attackerkb
attackerkb
CVE-2017-11512
2017-11-08 00:00:00
cvelist
cvelist
CVE-2017-11512
2017-11-08 00:00:00
nuclei
nuclei
ManageEngine ServiceDesk 9.3.9328 - Arbitrary File Retrieval
2022-05-09 01:59:40
openvas
openvas
ManageEngine ServiceDesk Plus Multiple Vulnerabilities
2017-11-09 00:00:00