Vulnerabilities > CVE-2023-34197 - Unspecified vulnerability in Zohocorp Manageengine Servicedesk Plus 8.1/8.2/9.0

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
zohocorp

Summary

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications.

Vulnerable Configurations

Part Description Count
Application
Zohocorp
601