CVE-2019-8394

Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

Manageengine Servicedesk Plus

Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.

17. Feb 2019

Ausgewertete Quellen

• Hersteller
  https://www.manageengine.com/products/service-desk/readme.html
• Hinweis
  http://www.securityfocus.com/bid/107129
• Hinweis
  https://www.exploit-db.com/exploits/46413/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8394
• CISA
  Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
• NVD
  CVE-2019-8394