3 matches found
CVE-2015-2560
Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet...
PT-2017-6600
Name of the Vulnerable Software and Affected Versions Manage Engine Desktop Central version 9 before build 90135 Description The issue allows remote attackers to change passwords of users with the Administrator role. This is achieved via an addOrModifyUser operation to the...
CVE-2015-2560: Undefined Security Weakness
Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet...