CVE-2016-4890

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password…

published April 14, 2017

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03456 · 88.9th percentile
Published
2017-04-14T18:00Z
EPSS history
Timeline
  • 14 APR 18:00Z
    ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password…
    cvelistv5