Security Advisory
CVE-2020-13154
6.5
MEDIUM
Vulnerability Description
Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet.
Published Date
May 18, 2020
Official Source
NIST NVD Advisory