FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.
References
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-07-17T20:00:00Z

Updated: 2024-09-16T19:51:57.703Z

Reserved: 2011-07-17T00:00:00Z

Link: CVE-2011-2756

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-07-17T20:55:01.937

Modified: 2024-11-21T01:28:54.303

Link: CVE-2011-2756

cve-icon Redhat

No data.