| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine servicedesk plus | = 14.2< 14.2 | 14.2 |
| manageengine servicedesk plus msp | = 14.2< 14.2 | 14.2 |
| manageengine supportcenter plus | = 14.2< 14.2 | 14.2 |
Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free