Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Manageengine_servicedesk_plus | Zohocorp | * | 14.0 (excluding) |
| Manageengine_servicedesk_plus | Zohocorp | 14.0 (including) | 14.0 (including) |
| Manageengine_servicedesk_plus | Zohocorp | 14.0-14000 (including) | 14.0-14000 (including) |