PT-2018-16910 · Zoho+1 · Zoho Manageengine Desktop Central+1

Publicado 2018-04-18 · Atualizado 2019-10-03 · CVE-2018-5342

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions 10.0.124 through 10.0.184

Description An issue was discovered where network services, including Desktop Central and PostgreSQL, run with a superuser account.

Recommendations For versions 10.0.124 through 10.0.184, consider running the network services with a non-superuser account to minimize potential risks.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-5342

Produtos afetados

Postgresql

Zoho Manageengine Desktop Central

Referências · 3

• 🔥 https://nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-5342 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-5342 · Aviso do Fabricante