CVE-2011-2756

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2011-07-17

Last modified

2024-09-16

Weaknesses

CWE-287

Affected products

• Servicedesk Plus (Manageengine)

References

• http://www.kb.cert.org/vuls/id/543310