Unscored CVE-2023-34197 EUVD-2023-38296GHSA-vgh6-qcg3-p3mf

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege es…

Published Jul 7, 2023 · Updated Nov 13, 2024 · Assigned by mitre

Description

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications.

Advisories 1

WID-SEC-2023-1683 Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht Manipulation von Daten BSI CERT-Bund (WID) · Jul 6, 2023

References

https://www.manageengine.com/products/service-desk/CVE-2023-34197.html