CVE-2022-23863: Medium severity manageengine desktop central vulnerability
Published Jan 28, 2022
·Updated
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password.
Affected Software
1 affected component
ZohoCorp Manageengine Desktop Central<10.1.2137.10
Remediation
Event History
Jan 28, 2022
CVE Published
via MITRE·03:33 PM
Data Sourced
via MITRE·03:33 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for Zoho ManageEngine Desktop Central?
The vulnerability ID for Zoho ManageEngine Desktop Central is CVE-2022-23863.
2
What is the severity of CVE-2022-23863?
The severity of CVE-2022-23863 is medium, with a severity value of 6.5.
3
What does CVE-2022-23863 allow an authenticated user to do?
CVE-2022-23863 allows an authenticated user to change any user's login password.
4
How can I fix CVE-2022-23863?
To fix CVE-2022-23863, you should update Zoho ManageEngine Desktop Central to version 10.1.2137.10 or later.
5
Where can I find more information about CVE-2022-23863?
More information about CVE-2022-23863 can be found at https://www.manageengine.com/products/desktop-central/privilege-escalation-vulnerability.html.