CVE-2022-35403 Information

Description

Zoho ManageEngine ServiceDesk Plus before 13008 ServiceDesk Plus MSP before 10606 and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. (This also affects Asset Explorer before 6977 with authentication.)

Reference

https://www.manageengine.com/products/service-desk/cve-2022-35403.html