description: Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.
problem types: Incomplete List of Disallowed Inputs leading to Authenticated Remote Command Execution
affected:
{
product: ManageEngine ServiceDesk Plus
vendor: n/a
versions:
status: affected, version: Before 11205
}