CyberRota Analysis
AI analysis pending.
CVE
CVE-2016-4890
Severity
MEDIUM
CVSS
5.3
EPSS
3.46%
Original NVD Description
ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie.