I'm curious if Manage Engine has plans to fix a vulnerability that has now been published.....

 

"The ManageEngine Applications Manager is a web-based availability and performance monitoring application. ManageEngine is exposed to a local privilege escalation issue. Specifically, the application fails to sanitize data supplied to the "module" parameter of the "BackupSchedule.do" script. ManageEngine ServiceDesk Plus 8 is vulnerable; other versions may also be affected."

Ref: http://www.securityfocus.com/bid/48882/references

 

Source: http://www.net-security.org/vuln.php?id=15422