high7.8
CVE-2018-13412
An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282.
Impact
An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Desktop Central | before 10.0.282 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105348
- https://github.com/AJ-SA/Zoho-ManageEngine/blob/master/README.md
- https://www.manageengine.com/products/desktop-central/elevation-of-system-privilege.html
- http://www.securityfocus.com/bid/105348
- https://github.com/AJ-SA/Zoho-ManageEngine/blob/master/README.md
- https://www.manageengine.com/products/desktop-central/elevation-of-system-privilege.html