PT-2017-12032

Name of the Vulnerable Software and Affected Versions Ivanti Service Desk versions 2016.3 through 2017.3 Description The issue allows a normal user to send requests to a specific URI with the target user's username in an HTTP payload to retrieve a key/token and use it to access or update objects...