ManageEngine Desktop Central CVE-2017-7213 Remote Privilege Escalation Vulnerability

Bugtraq ID:	98471
Class:	Unknown
CVE:	CVE-2017-7213
Remote:	Yes
Local:	No
Published:	Apr 12 2017 12:00AM
Updated:	May 23 2017 04:26PM
Credit:	The vendor reported this issue.
Vulnerable:	ManageEngine Desktop Central 9 build 90130 ManageEngine Desktop Central 9 build 90121 ManageEngine Desktop Central 9 Build 90087 ManageEngine Desktop Central 9 build 90109 ManageEngine Desktop Central 9 build 90055 ManageEngine Desktop Central 9 build 90054 ManageEngine Desktop Central 9 build 90043 ManageEngine Desktop Central 9 build 90033 ManageEngine Desktop Central 9 ManageEngine Desktop Central 8 ManageEngine Desktop Central 7 ManageEngine Desktop Central 4
Not Vulnerable:	ManageEngine Desktop Central 10 Build 100082

ManageEngine Desktop Central CVE-2017-7213 Remote Privilege Escalation Vulnerability

ManageEngine Desktop Central is prone to a remote privilege-escalation vulnerability.

A remote attacker can leverage this issue to gain elevated privileges within the context of affected system.

Versions prior to ManageEngine Desktop Central 10 Build 100082 are vulnerable.

ManageEngine Desktop Central CVE-2017-7213 Remote Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ManageEngine Desktop Central CVE-2017-7213 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ManageEngine Desktop Central CVE-2017-7213 Remote Privilege Escalation Vulnerability

References:

• CVE-2017-7213 - Remote Control- Privilege Violation (Zoho)
  
• ManageEngine Homepage (ManageEngine)