CVE-2017-16924

Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers to download unencrypted XML files containing all data for configuration policies via a predictable /client-data//collections//usermgmt.xml URL, as demonstrated by passwords and...

PT-2018-6366

Name of the Vulnerable Software and Affected Versions: ManageEngine Desktop Central MSP version 10.0.137 Description: The issue allows attackers to download unencrypted XML files containing sensitive data, such as passwords and Wi-Fi keys, via a predictable API endpoint...