Vulnerability CVE-2021-31159
Published: 2021-06-16

Description:
Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732.

See advisories in our WLB2 database:
Topic
Author
Date
Low
Zoho ManageEngine ServiceDesk Plus MSP 9.4 User Enumeration
Ricardo Ruiz (@r...
02.07.2021

 References:
https://www.manageengine.com/products/service-desk-msp/readme.html#10519
https://www.manageengine.com
Copyright 2024, cxsecurity.com

 

Back to Top