Security Advisory
CVE-2019-10273
4.3
MEDIUM
Vulnerability Description
Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to enumerate active users. Due to a flaw within the way the authentication is handled, an attacker is able to login and verify any active account.
Published Date
April 4, 2019
Official Source
NIST NVD Advisory