CVE-2018-8653 | Severe Security Vulnerability fixes available
A severe vulnerability has been discovered by Microsoft: A remote code execution vulnerability corrupts memory in such a way that an attacker could successfully exploit the vulnerability and gain the user rights same as the current user. The Research team of Microsoft has released Cumulative updates CVE # 2018-8653, which needs to be deployed immediately. Cumulative and Delta Updates are also released on Patch Tuesday. This time, in the month of December they have released Cumulative and Delta updates:
Free eBook: 10 Firewall best practices for network security admins
The efficiency of your firewall rules is one of the key factors in determining the effectiveness of your firewall. Here are the top 10 firewall best practices that can help you optimize your rule/policy performance: https://zurl.co/ctpW.
Newsletter de Diciembre!
¡Newsletter de Diciembre! Actualízate sobre todas las novedades que tenemos este mes y recuerda inscribirte aquí para recibirlos mensualmente en tu buzón de correo.
Felices Fiestas!
Estimados, Envíen sus saludos mediante una de nuestras e-cards y contagien la alegría! http://bit.ly/fiestas18 Les deseamos unas felices fiestas y un 2019 repleto de éxitos. Saludos cordiales, El equipo de ManageEngine LATAM
2018: A feature retrospective
Hey there! The year 2018 has been action packed for the Analytics Plus team. We have brought in a boat load of new features, updates, and enhancements—none of which would have been possible without the continued love and support from the Analytics Plus community. Here are some highlights of the top features of the year: Report commenting Collaboration with your team just got better. With report commenting, you can insert comments in specific sections of your reports and start real-time conversations
[Webinar recording] An introduction on Request Life Cycle
Hello folks, In case you missed our webinar on Request Life Cycle, here's the recording: Do watch this webinar at your convenience and share us your feedback. Cheers!
ServiceDesk Plus 10002 Released
Dear Users, SDP 10002 has been released and can be downloaded from the URL below, https://www.manageengine.com/products/service-desk/service-packs.html Issues Fixed Vulnerability SD-74037 : CSRF vulnerabilities in incident or service request. Request SD-75279 : Post upgrade to 10, some users are unable to submit the Add New Request form if FAFR is enabled and description in the template is set as mandatory. SD-75292 : Request conversations are not sorted properly in descending order in MSSQL setups.
SQLite "Magellan" bug affects Chrome: Update Chrome to version 71.0.3578.80
A highly critical remote code execution vulnerability has been discovered in SQLite, an underlying database engine embedded into the Chrome browser. This vulnerability has not yet received a CVE identification number. As of now, the SQLite vulnerability has been widely referred by the codename "Magellan". Google acknowledged the bug in its browser's underlying database and has issued a fix in it's latest versions for Chrome starting from Chrome 71.0.3578.80, generally referred as Chrome 71. This
SQLite "Magellan" bug affects Chrome: Update Chrome to version 71.0.3578.80
A highly critical remote code execution vulnerability has been discovered in SQLite, an underlying database engine embedded into the Chrome browser. This vulnerability has not yet received a CVE identification number. As of now, the SQLite vulnerability has been widely referred by the codename "Magellan". Google acknowledged the bug in its browser's underlying database and has issued a fix in it's latest versions for Chrome starting from Chrome 71.0.3578.80, generally referred as Chrome 71. This
Microsoft Patch Tuesday updates for December 2018
Good day. Quick update on the December 2018 Patch Tuesday. New Security Bulletins : 2018-12 Security Update for Adobe Flash Player for Windows (KB4471331) 2018-12 Security Only Quality Update for Windows Server 2008 (KB4471319) 2018-12 Security Only Quality Update for Windows 7 and Windows Server 2008 R2 (KB4471328) 2018-12 Security Only Quality Update for Windows 8.1 (KB4471322) 2018-12 Security Only Quality Update for Windows Server 2012 and Windows Server 2012 R2 (KB4471326) 2018-12 Delta Update
Microsoft Patch Tuesday December 2018
Good day. Quick update on the December 2018 Patch Tuesday. New Security Bulletins : 2018-12 Security Update for Adobe Flash Player for Windows (KB4471331) 2018-12 Security Only Quality Update for Windows Server 2008 (KB4471319) 2018-12 Security Only Quality Update for Windows 7 and Windows Server 2008 R2 (KB4471328) 2018-12 Security Only Quality Update for Windows 8.1 (KB4471322) 2018-12 Security Only Quality Update for Windows Server 2012 and Windows Server 2012 R2 (KB4471326) 2018-12 Delta Update
Unauthenticated Remote Code Execution Vulnerability
This document will explain you about the Java deserialization vulnerability reported by Offensive Security Group Security Advisory which allows, Unauthenticated arbitrary code can be executed on the server where OpManager Plus is installed. Vulnerabilities Fix Released on CVE-2018-19403 11-December-2018 What was the Problem? Unauthenticated arbitrary code can be executed on the server where OpManager Plus is installed. This allows users to execute payloads. How do I fix it? This has been identified
Unauthenticated Remote Code Execution Vulnerability
This document will explain you about the Java deserialization vulnerability reported by Offensive Security Group Security Advisory which allows, Unauthenticated arbitrary code can be executed on the server where OpUtils is installed. Vulnerabilities Fix Released on CVE-2018-19403 11-December-2018 What was the Problem? Unauthenticated arbitrary code can be executed on the server where OpUtils is installed. This allows users to execute payloads. How do I fix it? This has been identified and fixed
Unauthenticated Remote Code Execution Vulnerability
This document will explain you about the Java deserialization vulnerability reported by Offensive Security Group Security Advisory which allows, Unauthenticated arbitrary code can be executed on the server where Firewall Analyzer is installed. Vulnerabilities Fix Released on CVE-2018-19403 11-December-2018 What was the Problem? Unauthenticated arbitrary code can be executed on the server where Firewall Analyzer is installed. This allows users to execute payloads. How do I fix it? This has been
Unauthenticated Remote Code Execution Vulnerability
This document will explain you about the Java deserialization vulnerability reported by Offensive Security Group Security Advisory which allows, Unauthenticated arbitrary code can be executed on the server where Network Configuration Manager is installed. Vulnerabilities Fix Released on CVE-2018-19403 11-December-2018 What was the Problem? Unauthenticated arbitrary code can be executed on the server where Network Configuration Manager is installed. This allows users to execute payloads. How do
Unauthenticated Remote Code Execution Vulnerability
This document will explain you about the Java deserialization vulnerability reported by Offensive Security Group Security Advisory which allows, Unauthenticated arbitrary code can be executed on the server where NetFlow Analyzer is installed. Vulnerabilities Fix Released on CVE-2018-19403 11-December-2018 What was the Problem? Unauthenticated arbitrary code can be executed on the server where NetFlow Analyzer is installed. This allows users to execute payloads. How do I fix it? This has been identified
Unauthenticated Remote Code Execution Vulnerability
This document will explain you about the Java deserialization vulnerability reported by Offensive Security Group Security Advisory which allows, Unauthenticated arbitrary code can be executed on the server where OpManager is installed. Vulnerabilities Fix Released on CVE-2018-19403 11-December-2018 What was the Problem? Unauthenticated arbitrary code can be executed on the server where OpManager is installed. This allows users to execute payloads. How do I fix it? This has been identified and
ServiceDesk Plus 10001 Released
Dear Users, SDP 10001 has been released and can be downloaded from the URL below, https://www.manageengine.com/products/service-desk/service-packs.html Behavior Change SD-71824 : In the combined list view of requests and tasks, you can view the total count of tasks by clicking the Horizontal Ellipsis icon at the bottom-right corner of the task list. SD-71824 : To get the item count in any module other than Requests using GET API, pass get_total_count as true under list_info of Input Data. SD-74373
Improve incident resolution time using annotations.
AlarmsOne has added 'Annotation' using which you can add notes or comments about an alarm. Annotations can be added by all Admins and those technicians who are assigned to a particular alarm. To add annotation, open an alarm in AlarmsOne, go to Annotation tab, add the comment and click Submit. Recent activity tab also shows the timeline of the annotations. Annotation has a character limit of 5000 characters and does not support special characters. Try 'annotation' now, talk about the alarm and improve
Share your thoughts about Patch Manager Plus and earn a gift card!
Dear folks, Thanks for your continued support of Patch Manager Plus. We would like to hear how we are faring. You can review us on IT Central Station here: https://www.itcentralstation.com/lp/vendor_invite?product_id=manageengine-patch-manager-plus Also, you can review us on Capterra: http://ca.gartnerdigitalmarkets.com/Patch-Manager-Plus-179288-SS-01_Write_a_Review.html What more, you will be entitled for a gift coupon worth $10 upon reviewing us on Capterra! Keep your reviews coming, your reviews
Database Query Monitoring Has Been Enhanced!
Have you ever felt that you needed to monitor more than just the default attributes in your SAP HANA and SAP MaxDB databases? Well, now you can, because ManageEngine Applications Manager now supports Database Query Monitoring of SAP HANA and SAP MaxDB. When you add a SAP HANA or SAP MaxDB database monitor, you can monitor only a predefined set of attributes by default. With a database query monitor, you can execute a set of queries and analyse the result. The new enhancement of database query monitor
Password Manager Pro New Upgrade Pack Available - 9802
Hi, Password Manager Pro 9802 has been released and is now available for downloading. This release strengthens SSL certificate management in Password Manager Pro by introducing GoDaddy integration and certificate sharing. Other enhancements include support for Traditional Chinese in multi-language editions as well as the provision to auto logon to Cisco resources using Windows domain accounts. New Features & Enhancements in v9802 GoDaddy integration for SSL certificate lifecycle management:
Hotfix 8110 Released
Dear Customers, We have released the 8110 hotfix. Please download the hotfix from the below link https://www.manageengine.com/products/support-center/service-packs.html Please find the readme from the below link https://supportcenter.wiki.zoho.com/ReadMe-V3.html#8110 Thank You Regards, Syed SupportCenter Plus
Technician Auto Assignment to Requests (an explanation on Precedence)
Want to try your hand at our "Request Life Cycle" feature? Head here and we would be happy to receive your feedback.
Get the first glimpse of ServiceDesk Plus Beta
Dear Users, We would like to bring to your notice that, we are planning to release upcoming SDP ServicePack with below features. Build url : http://beta.servicedeskplus.com Request Life Cycle : Configure a clear sequence of statuses for any incoming request so that the assigned technician is guided to the next possible transition/s easily. The next possible transition for any request is displayed in the Request Details page. Associate a life cycle to any number of templates. However, only one
New feature alert : Applications Manager now supports Amazon Aurora!
Yes, you heard that right! Applications Manager now provides round the clock monitoring for Amazon Aurora - a MySQL and PostgreSQL compatible database available as a part of Amazon Relational Database Service (RDS). Amazon Aurora's unique set of features include auto-scaling storage, low-latency replication, high throughputs, and more. With our new feature you can : Track critical metrics of your Aurora monitor like CPU utilization, active/blocked transactions, latency, throughput, network traffic,
[Webinar recording] Launching advanced analytics for ServiceDesk Plus' request history, projects, and solutions modules.
In case you missed our webinar, Launching advanced analytics for ServiceDesk Plus' request history, projects, and solutions modules, here's the recording:
[Webinar recording] Launching advanced analytics for ServiceDesk Plus' request history, projects, and solutions modules.
In case you missed our webinar, Launching advanced analytics for ServiceDesk Plus' request history, projects, and solutions modules, here's the recording of the session:
ServiceDesk Plus MSP - version 9.4 - Build - 9411 Released
Dear User(s) We released ServiceDesk Plus MSP - version 9.4 - Build - 9411. Please refer the Migration path table available here and upgrade to our latest build 9411. Issues Fixed : SDPMSP-12535 : Mail Fetching is getting Stopped while request creation through email after upgrading to 9410 in certain cases. SDPMSP-12545 : Default Billing Contract is not applied over Requests which are created through Preventive Maintenance Task. SDPMSP-12547 : API structure of request details doesn't have contract
ServiceDesk Plus 9426 Released
Dear Users, SDP 9426 has been released and can be downloaded from the URL below, https://www.manageengine.com/products/service-desk/service-packs.html Issues Fixed in 9426 SD-74184 : Mail processing time increases in IMAP protocol if the attachment size is huge. SD-74263 : The Apple push notification certificate is updated in this build. Please refer to the below link for the steps to install the patch. https://www.manageengine.com/products/service-desk/service-packs.html#sp Regards, Edwin Vasantha
[Tips & Tricks] Viewing/Searching request activities is no longer time consuming.
Hello folks, In older versions, searching request activity history used to be time-consuming, we had to look the entire history page to find details of a specific operation. Let us consider, a request that has been doing the rounds for quite some time just got reassigned to you, you would like to see everything that has transpired so far, right from when the ticket first landed in your ServiceDesk, this simple yet great feature helps you filter the activities you would want to know. Click on the
[ManageEngine] Your free PST migration tool is here!
Introducing PST Migration Tool! This free tool allows you to export your Exchange and Office 365 mailbox contents to PST files, and import PST files in bulk to Office 365 mailboxes. Learn more. Download Free Tool Suite 5.5.2 By downloading the free tool suite 5.5.2, you get access to the PST Migration Tool along with 19 other free tools that help in efficient Active Directory administration. If you are using the free tool suite version 5.5.1 or earlier, please download the latest version (5.5.2) to
Microsoft pulls back a couple of MS Office patches after it's found to cause app crashes on start-up
Microsoft has rolled back two of its non-security Office patches- KB 4461522 and KB 2863821 that triggers entry point crashes in various Office 2010 products. These non-security updates were released earlier this month to comply with the changes coming in the Japanese calendar next month. In an update on the KB pages, Microsoft acknowledged that the updates were pulled due to the crashes in some applications and has also given a workaround. "After you install this update, you may experience
Microsoft pulls back a couple of MS Office patches after it's found to cause app crashes on start-up
Microsoft has rolled back two of its non-security Office patches- KB 4461522 and KB 2863821 that triggers entry point crashes in various Office 2010 products. These non-security updates were released earlier this month to comply with the changes coming in the Japanese calendar next month. In an update on the KB pages, Microsoft acknowledged that the updates were pulled due to the crashes in some applications and has also given a workaround. "After you install this update, you may experience
ServiceDesk Plus MSP - version 9.4 - Build - 9410 Released
Dear User(s) We released ServiceDesk Plus MSP - version 9.4 - Build - 9410. Please refer the Migration path table available here and upgrade to our latest build 9410. Few Major features available are as follows : Integration with Salesforce CRM Associate multiple contracts with an account. Create prepaid service plans. Account Tab is introduced newly near Admin tab to Configure and track account details effectively. Option to disable survey filling through non-login URL using query. Share MSP assets
Next Release : Change Enhancements & Bug Fixes
Dear Customers, We are preparing with a set of enhancements & bug fixes for Change module in ServiceDesk Plus OnDemand. Below are few enhancements & behavior changes done in Change module : Enhancements You can now export or import all change conversations. To export, go to Setup >> Export Data >> Conversations >> Changes. Note that you can export request conversations under Setup >> Export Data >> Conversations >> Requests as captured below: To import, go to Setup >> Import Data >> Conversations. You
[Tips & Tricks] Simple way to search requests submitted by a specific requester
Dear Users, I've come up with a simple trick to search requests submitted by a specific requester. Let us consider this scenario, you are in an urge to search a request submitted by a user or you often search requests by requesters, this has to be done by column filtering (requester name). Also, this would be a challenge if requester's name is mistyped. This simple trick would help you save some time and search requests pretty easily. All you got to do is, click new request and type in few letters
Join team Applications Manager at AWS-reInvent!
With just a week left for AWS re:Invent, team Applications Manager is looking forward to interacting with some of the brightest minds of the AWS industry. You heard that right! AWS- re:Invent is all set to take place from Nov 26-30. Greet Applications Manager at booth #1505 : What's in it for you : Talk to our application monitoring experts in 1:1 sessions and get all your questions answered. Learn how Applications Manager will help you monitor some the health and performance of AWS services such
[ Release update] Release announcement: Build 4000
Hello folks! We're happy to roll out Analytics Plus build 4000 that comes power-packed with whole lot of features and updates. 1. Revamped home page UI The Analytics Plus home page has been completely revamped for easy navigation. - The main navigational elements are bigger and bolder. - The various workspace elements are organized into 'Reports', 'Dashboards', and 'Data' to give you easy access to your data. 2. Introducing report commenting With the new update, you can insert comments in your reports
Microsoft Patch Tuesday November 2018: Everything you need to know
Microsoft has announced its Patch Tuesday updates for November, which contains patches for 64 vulnerabilities, 12 of which are rated critical. it also has patched ALPC along with a couple of publicly disclosed vulnerabilities. Here are the complete details: New Security Bulletins : 2018-11 Security Update for Adobe Flash Player for Windows (KB4467694) 2018-11 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 (KB4467703) 2018-11 Security Only Quality Update for Windows Server
Next Page