CVE-2018-5340: High severity ZohoCorp Manageengine Desktop Central vulnerability
An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: database access using a superuser account (specifically, an account with permission to write to the filesystem via SQL queries).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-5340?
CVE-2018-5340 is a vulnerability in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184 that allows database access using a superuser account.
What is the severity of CVE-2018-5340?
The severity of CVE-2018-5340 is high, with a severity value of 7.2.
How does CVE-2018-5340 affect Zoho ManageEngine Desktop Central?
CVE-2018-5340 affects Zoho ManageEngine Desktop Central versions 10.0.124 and 10.0.184 by providing unauthorized access to the database using a superuser account.
How can I fix CVE-2018-5340 in Zoho ManageEngine Desktop Central?
To fix CVE-2018-5340, it is recommended to update Zoho ManageEngine Desktop Central to a version that does not have the vulnerability.
Where can I find more information about CVE-2018-5340?
More information about CVE-2018-5340 can be found at the following references: [https://www.manageengine.com/products/desktop-central/query-restriction-bypass-vulnerability.html](https://www.manageengine.com/products/desktop-central/query-restriction-bypass-vulnerability.html) and [https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/](https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/)