CVE-2017-16924: Use of Insufficiently Random Values

Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers to download unencrypted XML files containing all data for configuration policies via a predictable /client-data/ /collections//usermgmt.xml URL, as demonstrated by passwords an...