ZDI-23-229: ManageEngine ServiceDesk Plus MSP generateSQLReport Improper Input Validation Privilege Escalation Vulnerability
Published Mar 9, 2023
·Updated
This vulnerability allows remote attackers to escalate privileges on affected installations of ManageEngine ServiceDesk Plus MSP. Authentication is required to exploit this vulnerability.
Affected Software
1 affected component
ManageEngine ServiceDesk Plus MSP
Event History
Mar 9, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-229?
The severity of ZDI-23-229 is classified as a privilege escalation vulnerability.
2
How do I fix ZDI-23-229?
To fix ZDI-23-229, apply the latest security updates provided by ManageEngine for ServiceDesk Plus MSP.
3
Who is affected by ZDI-23-229?
ZDI-23-229 affects installations of ManageEngine ServiceDesk Plus MSP that require authentication to exploit.
4
Can ZDI-23-229 be exploited remotely?
Yes, ZDI-23-229 allows remote attackers to escalate privileges, provided they have authenticated access.
5
What are the consequences of ZDI-23-229 exploitation?
Exploitation of ZDI-23-229 can lead to unauthorized actions being performed with elevated privileges on the affected system.