An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3 Build 9317. Unauthenticated users are able to validate domain user accounts by sending a request containing the username to an API endpoint. The endpoint will return the user's logon domain if the accounts exists, or 'null' if it does not.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T06:24:11.842Z
Reserved: 2018-02-19T00:00:00
Link: CVE-2018-7248

No data.

Status : Modified
Published: 2018-05-11T14:29:00.267
Modified: 2024-11-21T04:11:52.570
Link: CVE-2018-7248

No data.