EUVD-2020-5430

Malware in sbrugna...

CVE-2020-13154: Missing Authorization

Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet...

PT-2020-13359

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Service Plus versions prior to 11.1 build 11112 Description The issue allows low-privilege authenticated users to discover the File Protection password. This is achieved through a getFileProtectionSettings call to the...