CVE-2016-4890

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

CVE-2016-4890

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

CVE-2016-4890

CVE-2016-4890 affects ManageEngine ServiceDesk Plus prior to version 9.2. The vulnerability is due to an insecure cookie-generation method, which can allow an attacker who gains access to a cookie to obtain password information. Remediation guidance in the connected documents recommends updating ...