A major security flaw in Linux Sudo has been discovered!
A potentially catastrophic vulnerability in sudo has recently been found that affects all Linux endpoints. This vulnerability (CVE-2019-14287), when exploited, enables users with hostile intentions to surpass security restrictions and run commands as the root user. Sudo is a core command in Linux that enables users to execute commands as other users including those that have elevated privileges such as another superuser or root user. Desktop Central now supports detecting and fixing the vulnerability.
Adobe releases out-of-band security updates in its products
Adobe is considered one of the widely used third-party applications in the market with over 15 million active subscriptions. As announced earlier, Adobe has released out-of-band security updates today to patch a total of 82 security vulnerabilities across products listed below. Adobe Acrobat and Reader Adobe Experience Manager Adobe Experience Manager Forms Adobe Download Manager Of these 82 vulnerabilities, 45 are rated critical and if exploited, attackers can execute arbitrary code in the context
Adobe releases out-of-band security updates in its products
Adobe is considered one of the widely used third-party applications in the market with over 15 million active subscriptions. As announced earlier, Adobe has released out-of-band security updates today to patch a total of 82 security vulnerabilities across products listed below. Adobe Acrobat and Reader Adobe Experience Manager Adobe Experience Manager Forms Adobe Download Manager Of these 82 vulnerabilities, 45 are rated critical and if exploited, attackers can execute arbitrary code in the context
Password Manager Pro new build 10302
Hi, Password Manager Pro 10302 has been released and is now available for download. In this build, a few enhancements have been done to the Password Manager Pro agent. From now on, while installing the agent on a remote server, you will have to provide a unique 'Agent Key'. Please see our Release Notes to learn in detail about the feature and enhancements included in this upgrade pack (build 10302). How to Upgrade to Build 10302? If you are an existing customer of Password Manager Pro,
[ForYourInformation -17]: Add your own HTML for external web page
The ESM portal's layout and theme can be customized. External links to an organization's resource page or an intranet page can be added to the portal as well. To Customize the HTML goto [ ESM Directory -> ESM Portal Customization -> Customize ] For embedding the new card, you will have to place the below HTML after {{{{portal-cards}}} <a href="https://www.manageengine.com/network-monitoring/"> <div class="portal-widget"> <div class="row justify-content-around"> <div class="col-xs-4">
Zero-day vulnerability in Apple iTunes and iCloud for Windows patched
Hi guys, A zero-day vulnerability in iTunes and iCloud for Windows, which has been exploited in Ransomware attacks has been patched in Patch Tuesday October 2019 updates. The vulnerability exists in the Bonjour installer that gets installed in Windows machines along with the iTunes and iCloud for Windows app. This vulnerability in Bonjour installer is an 'unquoted service path' vulnerability, and can be exploited by planting a malicious executable file to the parent path. Further this exploit's
Zero-day vulnerability in Apple iTunes and iCloud for Windows patched
Hi guys, A zero-day vulnerability in iTunes and iCloud for Windows, which has been exploited in Ransomware attacks has been patched in Patch Tuesday October 2019 updates. The vulnerability exists in the Bonjour installer that gets installed in Windows machines along with the iTunes and iCloud for Windows app. This vulnerability in Bonjour installer is an 'unquoted service path' vulnerability, and can be exploited by planting a malicious executable file to the parent path. Further this exploit's
[DidYouKnow -16] Ticket closure automation
Automation features in the ITSM tool certainly improve the quality of service provided to customers. Automation ensures less human error and high reliability, which in turn reduces the workload of technicians. Enabling "Auto Ticket Closure" in Service Desk Plus is a simple process. Admin can enable this feature from [Admin tab -> Helpdesk Customizer -> Request Closing Rules ] he can define the number of days after which a ticket should be moved to "Closed Status" Once the technician provides
FREE WEBINAR TRAINING SCHEDULE - DESKTOP CENTRAL
Hello Everyone, While it is true that managing and securing endpoints is time-consuming, automation is the key in saving time. Learn how mundane desktop management activities can be automated and streamlined from a central location and make the most out of our products by attending our free training program. These webinars span across four series and help you learn the inside out of managing and securing endpoints. You will also be able to: 1. Get your questions solved instantly 2. Learn how each
[ForYourInformation -15] Priority Matrix
Tickets in an IT Organization are always considered as an important component. Priority is the key factor that defines its importance. More focus will be always on tickets with "High Priority" ( where the customer expects quick resolution). The ticketing tool used by the IT organization should have perfect metrics to identify tickets Priority. If we start considering all tickets based on labels as "High priority" it will burden the ticket coordinators and gives a chance of more ticket violations.
Share alarms with your in-house apps using our custom outbound integration.
AlarmsOne has been allowing you to share alarms with your Help Desk, Team Collaboration, and Project Management tools to raise them as tickets, create bugs, and so on. To integrate with your in-house application and receive alarms from AlarmsOne, we have built a custom outbound integration. AlarmsOne's custom outbound API is a RESTful API that helps you send alarms from AlarmsOne to your custom application. Adding a custom outbound application is as easy as it gets. Follow the steps below and you're
Microsoft Patch Tuesday updates - October 2019
Howdy folks A quick run-down on the patch tuesday updates for October 2019 New Security Bulletins : 2019-10 Security Only Quality Update for Windows Server 2008 (KB4520009) 2019-10 Security Only Quality Update for Windows 7 and Windows Server 2008 R2 (KB4520003) 2019-10 Security Only Quality Update for Windows Server 2012 (KB4519985) 2019-10 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 (KB4519990) 2019-10 Cumulative Update for Windows 10 Version 1903 and Windows Server
Microsoft Patch Tuesday Updates - October 2019
Howdy folks A quick run-down on the patch tuesday updates for October 2019 New Security Bulletins : 2019-10 Security Only Quality Update for Windows Server 2008 (KB4520009) 2019-10 Security Only Quality Update for Windows 7 and Windows Server 2008 R2 (KB4520003) 2019-10 Security Only Quality Update for Windows Server 2012 (KB4519985) 2019-10 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 (KB4519990) 2019-10 Cumulative Update for Windows 10 Version 1903 and Windows Server
[ForYourInformation -11]: SCCM Integration
If your Organization already had Microsoft System Centre Configuration Manager (SCCM) to manage desktops and Windows-based applications. You can now integrate Service Desk Plus with SCCM and fetch SCCM-scanned asset data. The integration leverages SCCM's scan capabilities and benefits Service Desk Plus users. In addition, you can avoid installing two agents to fetch asset details. You can use SCCM for asset discovery and also simultaneously update asset data in Service Desk Plus. In the older build
[Password Manager Pro Masterclass] Privileged session management: Onboarding employees and vendors for secure remote access provisioning.
Hi there, Our next topic for the Password Manager Pro Masterclass series is "Privileged session management: Onboarding employees and vendors for secure remote access provisioning," scheduled for October 10th. Click here to register for the session. In this Masterclass session, you'll learn how to: 1. Launch direct RDP, VNC, and SSH sessions from any HTML5-compatible browser without endpoint agents, browser plug-ins, or helper programs. 2. Secure access gateways to establish reliable connections
Newsletter de Septiembre!
¡Newsletter de Septiembre! Actualízate sobre todas las novedades que tenemos este mes y recuerda inscribirte aquí para recibirlos mensualmente en tu buzón de correo
ManageEngine's IT Security Podcast series is here! Subscribe now.
Hello, Have you ever imagined listening to your favorite IT security expert discuss the ways you can enhance the security posture of your environment on-the go? Now you can! We're thrilled to announce the launch of our weekly podcast series where our security experts, including Derek Melber, Active Directory MVP, will present their take on a wide range of IT security topics. Subscribe now By subscribing and listening to
Free Enterprise Service Management (ESM) training webinar
Hey everyone, We have planned a second ESM training webinar for all those who missed the first one. Join us on October 15th to get a better understanding of how we do ESM in ServiceDesk Plus. In this webinar, we'll go over how you can extend your ITSM best practices to all your business units to mitigate and optimize your service delivery across each function of your organization with ServiceDesk Plus. Key takeaways: - Creating and deploying a unique service desk in less than 60 seconds. -
Patches for 8 high-severity vulnerabilities in Foxit Reader released
Hey folks, Eight highly critical vulnerabilities have been discovered in Foxit Reader and Foxit has come out with the patches to fix these vulnerabilities. The most severe of these vulnerabilities has a CVSS score of 8.8 and could result in arbitrary code execution and denial of service, when used in older versions of Foxit Reader (version 9.4.1.16828). The other seven vulnerabilities have a CVSS score of 7.8 and could allow a remote attacker to gain access to the system. These specifically target
Introducing Enterprise Service Management in ServiceDesk Plus
Dear User, ServiceDesk Plus 11.0 now comes with rapid-start enterprise service desk capabilities that allow businesses to manage service delivery across business functions from a single platform. Upgrade to the latest version of ServiceDesk Plus now. The key Enterprise Service Management (ESM) capabilities of ServiceDesk Plus includes: Unified service management platform Manage your organization users, control organization-level configurations, and maintain individual service desk from a central
[DidYouKnow -13] Solution/KB with public access
In any IT organization, we need to find solutions for our day to day incidents/issues, at times we lookup for someone or some type of assistance, like asking our colleagues or raising a support ticket, the efficient method to get quick answers for our
ServiceDesk Plus 11.0 - Known issues
Dear User, The following list contains the issues identified in the ServiceDesk Plus 11.0 release. We are working hard to fix them as early as possible. Expect an update soon. During upgrade, 'Out of Memory' error occurs because only a maximum heap size of 100 MB is allocated to UpdMgr.bat. [Fixed and Released] Upon changing the default administrator or guest login name, header tabs disappear. [Fixed and Released in 11001] After the upgrade, if there are any old unsent feedback submitted through
Mobile Device Manager Plus- Free Training
Join us on 17th, 24th October and 7th November 2019 at 6:30 GMT or 11:30 EDT for a free training session on ManageEngine's enterprise mobility management solution - Mobile Device Manager Plus! Following topics will be covered on October 17: Device Onboarding and Provisioning: Enrollment methods to manage BYOD and corporate devices Applying corporate configurations like VPN, e-mail and Wi-Fi to devices Containerizing corporate data on personally-owned devices Monitoring devices accessing organization's
[Upcoming webinar] How to implement continual service improvement in your help desk
Implementing continual service improvement in your help doesn't have to be difficult. Join us for a three-part webinar series to discover how easy it is to implement continual service improvement (CSI) in your organization, starting with these specific areas: Part I - Decreasing request resolution time Learn how to visually compare past request resolution times with current resolution times; use analytics to identify and rectify key factors that drag down resolution times. Date: October 17, 2019
[ForYourInformation -13] Multilingual translations made too easy
Hello folks, Language is the medium to get travel your words to reach people in different regions. It becomes irksome when you want to set up your business in another country, region, where languages are different than yours and you are not familiar with it. Now, it is not less than a herculean task. With ServiceDesk Plus, you can now translate the user interface texts and personalize the application as per your requirement. You can choose to rename modules or any UI phrases used across the application.
Introducing Wi-Fi Analyzer for OpManager
Wi-Fi Analyzer for OpManager effectively monitors signal strength, channel graph, and channel interference of all the available Wi-Fi networks. The best part is that you can enjoy the smart Wi-Fi analyzer with absolutely no advertisements. The enhancement is supported on Android mobile and tablet devices. The benefits of this most sought-after feature are: Easy-to-read-and-understand graphs to know which of your Wi-Fi devices and Access Points are performing low, good and the best. Sysadmins can
Microsoft releases out-of-band security update to fix IE zero-day & Defender bug
1. IE zero day The IE zero day is a very critical vulnerability which can be exploited via Remote Code Execution (RCE). Remote code execution is an attack that can be performed by executing malicious codes from remote location. The IE zero day is tracked with CVE-2019-1367identifier. 2. Microsoft Defender DoS bug Microsoft also released security patches to fix a DoS bug associated with Microsoft Defender. The good news is, to exploit the bug, the attacker first needs to gain access to the victim's
[ForYourInformation -12] Merging duplicated requesters accounts
Hello folks, With build 9412, a built-in functionality to merge duplicated requesters accounts was introduced. It helps you detect duplicated requester accounts (with the same login name or email address) in different domains and merge them into single accounts. It also helps you avoid confusion in identifying the correct users. Following are the probable causes of requesters accounts duplication: The same user is fetched from more than one domain during user import Servers are moved from Windows
Microsoft releases out-of-band security update to fix IE zero-day & Defender bug
1. IE zero day The IE zero day is a very critical vulnerability which can be exploited via Remote Code Execution (RCE). Remote code execution is an attack that can be performed by executing malicious codes from remote location. The IE zero day is tracked with CVE-2019-1367identifier. 2. Microsoft Defender DoS bug Microsoft also released security patches to fix a DoS bug associated with Microsoft Defender. The good news is, to exploit the bug, the attacker first needs to gain access to the victim's
User/technician API v3 changes over the 11000 (ESM) release
Dear Customers, Requester/technician related APIs(v1/v2) wont be supported anymore after the ESM (11000) release. You may need to update your existing requester/technician related API's with this latest v3 version. The ESM version has some changes towards the user/technician APIs. We use a common term under the ESM Directory as ' Users ' instead of ' Requesters ' and ' Technicians ' separately. Once the user is moved to the respective instance, ' Users ' will be termed as ' Technicians
ServiceDesk Plus 10500 Released
Dear Users, SDP 10500 has been released and can be downloaded from the URL below, https://www.manageengine.com/products/service-desk/service-packs.html Behavior Changes Microsoft SQL 2005 will be not be supported anymore. To migrate to the latest MSSQL, click here. Backslashes (\) in any additional field names will not be supported anymore. Any backslashes mentioned in additional fields earlier will be changed to forward slashes after this upgrade. Going forward, if there is any data inconsistency
[DidYouKnow - 9] Task automation with "Task Dependency" feature
Using "Task Dependency" mapping you can sequence the tasks to be performed within a request. Dependency mapping restricts users from closing tasks until the dependent tasks are closed. Task dependencies are important because sometimes the result of one
[Password Manager Pro Masterclass] Enabling password management best practices in a multi-vendor network environment.
Hi there, Our next topic for the Password Manager Pro Masterclass series is "Enabling password management best practices in a multi-vendor network environment," scheduled for September 12th. Click here to register for the session. This session will focus on managing the passwords of network devices out-of-the-box without having to worry about complex remote commands via SSH. In this Masterclass session, you'll learn how to: 1. Directly reset the passwords of any SSH-based network device without
[ForYourInformation -10] Auto-delete users that no longer exist in the active directory
Hello folks, With ServiceDesk Plus, you can now sync the deleted requesters/technicians from the Active Directory. Syncing of deleted users happens after a user import. Once the sync is done, it shows you the list of deleted users from AD. You can delete the requesters and technicians from the list. For requesters, auto-deletion can be enabled so that when a requester is deleted from the active directory, the user will be removed from the application as well. However, technicians have to be deleted
[ForYourInformation -9]: On behalf of field in request form can be managed by FAFR
User On-Behalf-Of: This feature in Service Desk is to support the creation of a new request by a user On-Behalf-Of another user. A Scenario to understand this feature: Tom finds a login issue with his Laptop, he needs to log an incident ticket regarding this case, however, he is already locked out of his Laptop, Andrew his colleague helps him to log the ticket in Service Desk using On-Behalf-Of feature. Notifications like request creation/resolved/closed/survey will be sent to both requester and
Patch Tuesday September 2019 updates from ManageEngine
Good day. Quick update on the September 2019 Patch Tuesday. New Security Bulletins : 2019-09 Security Update for Adobe Flash Player for Windows (KB4516115) 2019-09 Security Only Quality Update for Windows Server 2008 (KB4516051) 2019-09 Security Only Quality Update for Windows 7 and Windows Server 2008 R2 (KB4516033) 2019-09 Security Only Quality Update for Windows Server 2012 (KB4516062) 2019-09 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 (KB4516064) 2019-09 Cumulative
Mobile Device Manager Plus enhances its app management capabilities
With Windows multi-app Kiosk and test and deploy support for enterprise apps, Mobile Device Manager Plus further simplifies app management in organizations. Test and deploy enterprise apps Organizations that develop apps in-house need to test out every app update before upgrading the app in the production environment to ensure the app update is compatible with all the devices and new OS versions. Testing apps is also required to ensure that the new app version doesn't affect user productivity after
[DidYouKnow -7] Best ways to track first response on requests
Learn different ways to track the first response made by a technician and stay efficient. Let's imagine a user is unable to perform an online transaction using his login credentials. He creates a help desk ticket without a mention of the actual error message. On noticing the ticket, the IT technician calls the user to gather more information on the issue. After he gathers the required information, he starts working on the resolution of the issue and forgets to update the first response in the application.
Upgrade your Desktop Central server for continued management of Apple devices!
With just a few days to go for Apple's release of their latest iOS 13 (releasing on September 19th) and macOS 10.15 Catalina operating systems, there's plenty of productivity as well as security driven features to explore. However, it is required to upgrade your Desktop Central server preceding the public release to ensure you can continue managing your Apple devices without any hassles. If your build number is below 10.0.413, click here. If your build number is between 10.0.421 and 10.0.432, click
[DidYouKnow - 8] About Organization Roles in ServiceDesk Plus
Organizational roles help you configure different roles specific to various levels of the organization like CEO, CFO, COO, etc. Roles can be configured concerning a particular Region, a Site, or a Department. Configuring the Organization's roles helps
Next Page