Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-34197

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications.

Published

2023-07-07T13:15:09.273

Last Modified

2024-11-21T08:06:45.420

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
  • Type: Secondary
    CWE-863
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zohocorp manageengine_servicedesk_plus < 14.2 Yes
Application zohocorp manageengine_servicedesk_plus 14.2 Yes
Application zohocorp manageengine_servicedesk_plus 14.2 Yes
Application zohocorp manageengine_servicedesk_plus_msp < 14.2 Yes
Application zohocorp manageengine_servicedesk_plus_msp 14.2 Yes
Application zohocorp manageengine_servicedesk_plus_msp 14.2 Yes
Application zohocorp manageengine_servicedesk_plus_msp 14.2 Yes
Application zohocorp manageengine_supportcenter_plus < 14.2 Yes
Application zohocorp manageengine_supportcenter_plus 14.2 Yes
Application zohocorp manageengine_supportcenter_plus 14.2 Yes
References