CVE-2019-15045
AjaxDomainServlet in Zoho ManageEngine ServiceDesk Plus 10 allows User Enumeration. NOTE: the vendor's position is that this is intended functionality
- Score
- CVSS 3.0 5.3 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2019-08-21
- Last modified
- 2024-08-05
- Weaknesses
- CWE-200
Affected products
References
- http://packetstormsecurity.com/files/154183/Zoho-Corporation-ManageEngine-ServiceDesk-Plus-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2019/Aug/17
- https://www.manageengine.com/products/service-desk/readme.html
