ManageEngine ServiceDesk DownloadFileServlet Information Disclosure (CVE-2017-11511)

An information disclosure vulnerability exists within ManageEngine ServiceDesk for Microsoft Windows. The vulnerability is due to the way ServiceDesk handles download requests. A successful attack could lead to stolen system information...