Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.

The version of ManageEngine ServiceDesk Plus running on the remote host is prior to 14.0 Build 14001. It is, therefore, affected by multiple vulnerabilities, including the following:

  - An XML external entity (XXE) vulnerability due to a flaw in the Analytics Plus integration.
    Threat actors with admin role access can retrieve local files from the server. (CVE-2022-40771)

  - A privilege escalation vulnerability allows an adversary to access restricted data in the     Postgres database setup by using a specific PostgreSQL function in the query, which enables     bypassing the validation mechanism. (CVE-2022-40772)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A privilege escalation vulnerability exists in ManageEngine AssetExplorer prior to 6.9 Build 6981. This vulnerability allows an adversary to access restricted data in the Postgres database setup by using a specific PostgreSQL function in the query, which enables bypassing the validation mechanism.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

A privilege escalation vulnerability exists in ManageEngine ServiceDesk Plus MSP prior to 10.6 Build 10609. This vulnerability allows an adversary to access restricted data in the Postgres database setup by using a specific PostgreSQL function in the query, which enables bypassing the validation mechanism.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

A privilege escalation vulnerability exists in ManageEngine SupportCenter Plus prior to 11.0 Build 11025.
This vulnerability allows an adversary to access restricted data in the Postgres database setup by using a specific PostgreSQL function in the query, which enables bypassing the validation mechanism.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

ID	Name	Product	Family	Severity
168361	ManageEngine ServiceDesk Plus < 14.0 Build 14001 Multiple Vulnerabilities	Nessus	CGI abuses	medium
168360	ManageEngine AssetExplorer < 6.9 Build 6981 Privilege Escalation	Nessus	CGI abuses	medium
168356	ManageEngine ServiceDesk Plus MSP < 10.6 Build 10609 Privilege Escalation	Nessus	CGI abuses	medium
168354	ManageEngine SupportCenter Plus < 11.0 Build 11025 Privilege Escalation	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2022-40772

medium

Tenable Plugins

medium

medium

medium

medium