Test ID:	1.3.6.1.4.1.25623.1.0.806509
Category:	Web application abuses
Title:	ManageEngine ServiceDesk Plus Multiple Vulnerabilities (Oct 2015)
Summary:	ManageEngine ServiceDesk is prone to multiple vulnerabilities.
Description:	Summary: ManageEngine ServiceDesk is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - Insufficient validation of some requests to url. - Improper access control to do certain functionality like viewing the subjects of the tickets, stats and other information related to tickets. - Insufficient sanitization of user supplied input via 'site' variable in 'CreateReportTable.jsp' page. Vulnerability Impact: Successful exploitation will allow remote attackers to enumerate users and get some sensitive information, to gain complete access to database/system. Affected Software/OS: ManageEngine ServiceDesk Plus version 9.0 before 9.0 Build 9031(Other versions could also be affected). Solution: Upgrade to ManageEngine ServiceDesk Plus version 9.0 Build 9031 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:C/A:P
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.