Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
User privilege escalation vulnerability
Vulnerability Description
There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by Zohocorp. This vulnerability impacts Asset Explorer versions before 7710, ServiceDesk Plus versions before 15110, ServiceDesk Plus MSP versions before 14940, and SupportCenter Plus versions before 14940.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
特权管理不恰当
Vulnerability Title
ZOHO多款产品 安全漏洞
Vulnerability Description
ZOHO ManageEngine ServiceDesk Plus等都是美国卓豪（ZOHO）公司的产品。ZOHO ManageEngine ServiceDesk Plus是一套基于ITIL架构的IT服务管理软件。ZOHO ManageEngine AssetExplorer是一套资产管理软件。ZOHO ManageEngine SupportCenter Plus是一种基于 Web 的客户支持软件。 ZOHO多款产品存在安全漏洞，该漏洞源于权限管理不当。以下产品及版本受到影响：ManageEngine
CVSS Information
N/A
Vulnerability Type
N/A