Описание
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:zen_help_desk_software:zen_help_desk:2.1:*:*:*:*:*:*:*
EPSS
Процентиль: 65%
0.00487
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb.
EPSS
Процентиль: 65%
0.00487
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other