← CVE Intelligence

CVE-2017-11512

Zoho / ManageEngine ServiceDesk PUBLISHED

Description (CNA)

The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.

Affected (CNA)

Vendor / productVersions
Zoho / ManageEngine ServiceDeskaffected 9.3.9328

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.