Zoho · Manageengine Desktop Central · CVE-2014-9331
**Name of the Vulnerable Software and Affected Versions**
ManageEngine Desktop Central versions prior to 9 build 90130
**Description**
A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an "addUser" action to "STATE ID/1417736606982/roleMgmt.do".
**Recommendations**
For versions prior to 9 build 90130, update to version 9 build 90130 or later to resolve the issue.