CVE-2019-10273

Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to enumerate active users

published April 4, 2019

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to enumerate active users. Due to a flaw within the way the authentication is handled, an attacker is able to login and verify any active account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07644 · 94.6th percentile
Published
2019-04-04T15:36Z
EPSS history
Timeline
  • 04 APR 15:36Z
    Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to enumerate active users
    cvelistv5