CVE-2023-26600 in ServiceDesk Plus

Riassunto

di MITRE • 06/03/2023

ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 26/02/2023
• Divulgazione: 06/03/2023
• Moderazione: accettato
• Voce: VDB-222399
• CPE: pronto
• CWE: Sconosciuto
• CVSS: 6.5 (NVD)
• EPSS: 0.06308
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-26600
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-26600
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-26600/