Description
ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions.
References
- JVNDB-2016-000170 third-party-advisory
- https://www.manageengine.com/products/service-desk/readme-9.0.html
- 93215 vdb-entry
- JVN#89726415 third-party-advisory