| Package | Affected versions | Patched versions |
|---|---|---|
| servicedesk plus | = 8.0≤ 8012 |
The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free