Описание
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:zen_help_desk_software:zen_help_desk:2.1:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.01213
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb.
EPSS
Процентиль: 67%
0.01213
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other