{
  "schema_version": "1.4.0",
  "id": "GHSA-w3v7-w92j-r88x",
  "modified": "2022-05-14T02:49:31Z",
  "published": "2022-05-14T02:49:31Z",
  "aliases": [
    "CVE-2015-1480"
  ],
  "details": "ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData action to servlet/AJaxServlet or a direct request to (2) swf/flashreport.swf, (3) reports/flash/details.jsp, or (4) reports/CreateReportTable.jsp.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1480"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/show/osvdb/117499"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/130081/ManageEngine-ServiceDesk-Plus-9.0-Privilege-Escalation.html"
    },
    {
      "type": "WEB",
      "url": "http://www.exploit-db.com/exploits/35904"
    },
    {
      "type": "WEB",
      "url": "http://www.manageengine.com/products/service-desk/readme-9.0.html"
    },
    {
      "type": "WEB",
      "url": "http://www.rewterz.com/vulnerabilities/manageengine-servicedesk-plus-user-privileges-management-vulnerability"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/534538/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/72302"
    }
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2015-02-04T16:59:00Z"
  }
}