CVE-2024-38869

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25.

Score

CVSS 3.1 8.3 High

Status

Modified - 0fc0942c-577d-436f-ae8e-945763c79b02

Published

2024-08-23

Last modified

2024-08-30

Weaknesses

CWE-79, CWE-863

Affected products

• Endpoint Central (Manageengine)
• Manageengine Endpoint Central (Zohocorp)
• Manageengine Servicedesk Plus (Zohocorp)
• Manageengine Servicedesk Plus Msp (Zohocorp)
• Manageengine Supportcenter Plus (Zohocorp)

References

• https://www.manageengine.com/products/desktop-central/security-updates-config-access.html