CVE-2020-13154

Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a…

published May 18, 2020

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03118 · 87.7th percentile
Published
2020-05-18T21:38Z
EPSS history
Timeline
  • 18 MAY 21:38Z
    Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a…
    cvelistv5