| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine servicedesk plus | = 9.3 |
Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to enumerate active users. Due to a flaw within the way the authentication is handled, an attacker is able to login and verify any active account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free