Security Advisory
CVE-2011-2756
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.