ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData action to servlet/AJaxServlet or a direct request to (2) swf/flashreport.swf, (3) reports/flash/details.jsp, or (4) reports/CreateReportTable.jsp.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-02-04T16:00:00

Updated: 2024-08-06T04:47:16.023Z

Reserved: 2015-02-04T00:00:00

Link: CVE-2015-1480

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-02-04T16:59:09.187

Modified: 2024-11-21T02:25:31.147

Link: CVE-2015-1480

cve-icon Redhat

No data.