CVE-2018-5342: High severity ZohoCorp Manageengine Desktop Central vulnerability

Published Apr 18, 2018

Updated

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: network services (Desktop Central and PostgreSQL) running with a superuser account.

Affected Software

2 affected components

ZohoCorp Manageengine Desktop Central=10.0.124

ZohoCorp Manageengine Desktop Central=10.0.184

Event History

Apr 18, 2018

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Data Sourced

via NVD·08:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-5342?

CVE-2018-5342 is a vulnerability discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184 that allows network services to run with a superuser account.

How does CVE-2018-5342 affect Zoho ManageEngine Desktop Central?

CVE-2018-5342 affects Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184 by enabling network services to run with a superuser account.

What is the severity of CVE-2018-5342?

The severity of CVE-2018-5342 is rated as high with a severity value of 7.2.

How can I fix CVE-2018-5342 in Zoho ManageEngine Desktop Central?

To fix CVE-2018-5342 in Zoho ManageEngine Desktop Central, upgrade to version 10.0.185 or later.

Where can I find more information about CVE-2018-5342?

You can find more information about CVE-2018-5342 at https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-manageengine-desktop-central/