rapid7/metasploit-framework — pull request #180 by ToxicRoot (2012-02-16 08:51:11+00:00)
Title: Name: ManageEngine ServiceDesk database disclosure

Description: Due to improper validation of user access rights, there is a possibility, having a guest rights by default (the account guest/guest), to reconfigure the backup rules and perform the backup procedure at any time, at the same time pointing out the directory in which to store the database service backup.

Authors: Yuri Omelyanenko , Yuri Goltsev