Beveiligingsadvies

CVE-2016-4890

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-04-14 18:00:00
Laatst bijgewerkt 2024-08-06 00:46:39
Toegewezen door jpcert
CVSS-score geen score
Status PUBLISHED

Beschrijving

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie.