CVE-2018-5338: Critical severity ZohoCorp Manageengine Desktop Central vulnerability
An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: missing authentication/authorization for a database query mechanism.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5338?
The severity of CVE-2018-5338 is critical with a CVSS score of 9.8.
How does CVE-2018-5338 affect Zoho ManageEngine Desktop Central?
CVE-2018-5338 affects Zoho ManageEngine Desktop Central versions 10.0.124 and 10.0.184.
What is the vulnerability described in CVE-2018-5338?
CVE-2018-5338 is a missing authentication/authorization issue in the database query mechanism of Zoho ManageEngine Desktop Central.
How can I fix CVE-2018-5338?
To fix CVE-2018-5338, it is recommended to update Zoho ManageEngine Desktop Central to a version that includes the necessary authentication/authorization mechanisms.
Where can I find more information about CVE-2018-5338?
More information about CVE-2018-5338 can be found at the following references: - [Reference 1](https://www.manageengine.com/products/desktop-central/elevation-of-privilege-vulnerability.html) - [Reference 2](https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/)