NVD

Id
23791  
Name
CVE-2015-1480  
Description
ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData action to servlet/AJaxServlet or a direct request to (2) swf/flashreport.swf, (3) reports/flash/details.jsp, or (4) reports/CreateReportTable.jsp.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-02-04  
Modified Date
2015-02-04  
Seq
2015-1480  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126467 23791 CVE-2015-1480 http://packetstormsecurity.com/files/130081/ManageEngine-ServiceDesk-Plus-9.0-Privilege-Escalation.html  View
126468 23791 CVE-2015-1480 35904  View
126469 23791 CVE-2015-1480 http://www.manageengine.com/products/service-desk/readme-9.0.html  View
126470 23791 CVE-2015-1480 http://www.rewterz.com/vulnerabilities/manageengine-servicedesk-plus-user-privileges-management-vulnerability  View
126471 23791 CVE-2015-1480 20150122 Fwd: REWTERZ-20140103 - ManageEngine ServiceDesk Plus User Privileges Management Vulnerability  View
126472 23791 CVE-2015-1480 72302  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6033 JVNDB-2015-001353 ZOHO ManageEngine ServiceDesk Plus における重要なチケット情報を取得される脆弱性 ZOHO ManageEngine ServiceDesk Plus (SDP) には、重要なチケット情報を取得される脆弱性が存在します。 CVE-2015-1480 78705 CVE-2015-1480 23791 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001353.html 2015-01-22 2015-02-12 View