CVE-2016-4888

概要

参考情報

• jvn.jp/en/jp/JVN50347324/index.html · Third Party Advisory
• jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000169.html · Third Party Advisory
• securityfocus.com/bid/93214 · Third Party Advisory
• manageengine.com/products/service-desk/readme-9.2.html

servicedesk plus のその他の脆弱性

• CVE-2019-10008高 8.8Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically co…
• CVE-2016-4890中 5.3ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain …
• CVE-2016-4889高 8.8ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to re…
• CVE-2015-1479中 6.5SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote…