Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2011-1509

Disclosure Date: September 20, 2011 (last updated October 04, 2023)
The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
0
0
Attacker Value
Unknown

CVE-2011-2757

Disclosure Date: July 17, 2011 (last updated October 04, 2023)
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the FILENAME parameter. NOTE: this might overlap the US-CERT VU#543310 issue.
0
0
Attacker Value
Unknown

CVE-2011-2756

Disclosure Date: July 17, 2011 (last updated October 04, 2023)
FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2011-2755

Disclosure Date: July 17, 2011 (last updated October 04, 2023)
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vectors.
0
0