Test ID:	1.3.6.1.4.1.25623.1.0.106319
Category:	Web application abuses
Title:	ManageEngine ServiceDesk Plus Multiple Vulnerabilities
Summary:	ManageEngine ServiceDesk Plus is prone to multiple vulnerabilities.
Description:	Summary: ManageEngine ServiceDesk Plus is prone to multiple vulnerabilities. Vulnerability Insight: ServiceDesk Plus is prone to multiple vulnerabilities: - A stored cross-site scripting vulnerability (CVE-2016-4888). - Using an insecure method for generating cookies (CVE-2016-4890). Vulnerability Impact: An arbitrary script may be executed on a web browser of a user that is logged in. If an attacker obtains a user's cookie, the password contained in the cookie can be easily guessed. Affected Software/OS: ServiceDesk Plus before version 9.2 build 9228. Solution: Upgrade to version 9.2 build 9228 or later CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4888 BugTraq ID: 93214 http://www.securityfocus.com/bid/93214 http://jvn.jp/en/jp/JVN50347324/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000169.html Common Vulnerability Exposure (CVE) ID: CVE-2016-4890 BugTraq ID: 93216 http://www.securityfocus.com/bid/93216 http://jvn.jp/en/jp/JVN72559412/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000171.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.