60
Vulnerability3 · 1 read
CVE-2017-11512
- CVSS 3.0
- 7.5 high
- EPSS
- 80%p100
- Published
- ·
- Modified
Description · NVD
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.
- Vendors
- manageengine
- Products
- servicedesk
- Weakness
- CWE-22
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N