CVE:CVE-2022-35403
CNNVD:CNNVD-202207-1189
ZOHO ManageEngine ServiceDesk Plus（SDP）是美国卓豪（ZOHO）公司的一套基于ITIL架构的IT服务管理软件。该软件集成了事件管理、问题管理、资产管理IT项目管理、采购与合同管理等功能模块。
ZOHO ManageEngine ServiceDesk Plus 3008 之前版本、ServiceDesk Plus MSP10606 之前版本、SupportCenter Plus 11022之前版本存在安全漏洞，该漏洞源于允许非登录用户通过发送精心制作的电子邮件以创建票证，从 ServiceDesk Plus、ServiceDesk Plus MSP 和 SupportCenter Plus 服务器计算机下载本地文件。
solution:Upgrade zohocorp manageengine_servicedesk_plus to a higher version than 13.0,13.0:13000,13.0:13001,13.0:13002,13.0:13003,13.0:13004,13.0:13005,13.0:13006,13.0:13007,and avoid the version (,13.0),13.0:13000,13.0:13001,13.0:13002,13.0:13003,13.0:13004,13.0:13005,13.0:13006,13.0:13007; Upgrade zohocorp manageengine_servicedesk_plus_msp to a higher version than 10.6,10.6:10600,10.6:10601,10.6:10602,10.6:10603,10.6:10604,10.6:10605,and avoid the version (,10.6),10.6:10600,10.6:10601,10.6:10602,10.6:10603,10.6:10604,10.6:10605; Upgrade zohocorp manageengine_supportcenter_plus to a higher version than 11.0,11.0:11000,11.0:11001,11.0:11002,11.0:11003,11.0:11004,11.0:11005,11.0:11006,11.0:11007,11.0:11008,11.0:11009,11.0:11010,11.0:11011,11.0:11012,11.0:11013,11.0:11014,11.0:11015,11.0:11016,11.0:11017,11.0:11018,11.0:11019,11.0:11020,11.0:11021,and avoid the version (,11.0),11.0:11000,11.0:11001,11.0:11002,11.0:11003,11.0:11004,11.0:11005,11.0:11006,11.0:11007,11.0:11008,11.0:11009,11.0:11010,11.0:11011,11.0:11012,11.0:11013,11.0:11014,11.0:11015,11.0:11016,11.0:11017,11.0:11018,11.0:11019,11.0:11020,11.0:11021; Upgrade zohocorp manageengine_assetexplorer to a higher version than 6.9,6.9:6900,6.9:6901,6.9:6902,6.9:6903,6.9:6904,6.9:6905,6.9:6906,6.9:6907,6.9:6908,6.9:6909,6.9:6950,6.9:6951,6.9:6952,6.9:6953,6.9:6954,6.9:6955,6.9:6956,6.9:6957,6.9:6970,6.9:6971,6.9:6972,6.9:6973,6.9:6974,6.9:6975,6.9:6976,and avoid the version (,6.9),6.9:6900,6.9:6901,6.9:6902,6.9:6903,6.9:6904,6.9:6905,6.9:6906,6.9:6907,6.9:6908,6.9:6909,6.9:6950,6.9:6951,6.9:6952,6.9:6953,6.9:6954,6.9:6955,6.9:6956,6.9:6957,6.9:6970,6.9:6971,6.9:6972,6.9:6973,6.9:6974,6.9:6975,6.9:6976