Description
Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet.
Unscored
CVE-2020-13154
EUVD-2020-5430GHSA-5h36-xpf2-wm7c
Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password vi…
Published May 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre