Security Update - ManageEngine Desktop Central (Remote Code Execution - Fixed)

Hello everyone,

Greetings.

Patches have been released for a remote code execution vulnerability reported by DDI Vulnerability Research in Desktop Central, Desktop Central MSP and Patch Manager Plus products.

This vulnerability allows any user in the network to upload files and execute commands on above mentioned Installed machine.

The fixed versions of the above-mentioned products are available in below build numbers.

1. Desktop Central - Fixed in version 10.0.181

2. Desktop Central MSP - Fixed in version 10.0.181

3. Patch Manager Plus - Fixed in version 10.0.151

#securityupdate-dc

Happy to assist, contact desktopcentral-support@manageengine.com

Sticky Posts
Security Update - Fix available for a privilege escalation vulnerability
Hello all! This notification is in regard to an elevation of privilege vulnerability (CVE-2022-23863) that was recently identified and fixed in Desktop Central and Desktop Central MSP. Please find the details and mitigation steps below. Vulnerability
Security Update - Ghostcat Vulnerability prevention for Desktop Central
A vulnerability with the name Ghostcat in Apache Tomcat (CVE 2020-1938), which is a third-party component used by Desktop Central was discovered by external security researchers of Chaitin Tech. This Ghostcat Vulnerability has been mitigated and has been released for ManageEngine Desktop Central. Follow the below given steps to prevent this vulnerability in Desktop Central Servers. Log in to your Desktop Central console, click on your current build number on the top right corner. You can find the
Security Update - ManageEngine Desktop Central (fixed & released Multiple Vulnerabilities)
Hello everyone, Greetings. Desktop Central has fixed and released Multiple Vulnerabilities reported in Desktop Central. Vulnerabilities Fixed are CVE-2018-5337, CVE-2018-5338, CVE-2018-5339, CVE-2018-5340, CVE-2018-5341. Latest fix released on 24th April 2018. Here are the knowledge base links for your reference https://www.manageengine.com/products/desktop-central/elevation-of-privilege-vulnerability.html https://www.manageengine.com/products/desktop-central/query-restriction-bypass-vulnerability.html
Security Update - ManageEngine Desktop Central (Remote Code Execution - Fixed)
Hello everyone, Greetings. Patches have been released for a remote code execution vulnerability reported by DDI Vulnerability Research in Desktop Central, Desktop Central MSP and Patch Manager Plus products. This vulnerability allows any user in the network to upload files and execute commands on above mentioned Installed machine. The fixed versions of the above-mentioned products are available in below build numbers. 1. Desktop Central - Fixed in version 10.0.181 2. Desktop Central MSP - Fixed
Security Update - ManageEngine Desktop Central
Dear Users, Wishing everyone a happy and productive New Year. Quick security update on password encryption violation in Desktop Central and MSP products. Any user who can access the Desktop Central Server computer can acquire specific passwords in Desktop Central has been handled and released in build 100157. #securityupdate-dc For more details, Desktop Central https://www.manageengine.com/products/desktop-central/password-encryption-policy-violation.html Desktop Central MSP https://www.manageengine.com/desktop-management-msp/password-encryption-policy-violation.html