• OpManager: The RemodeCodeExecution(RCE) vulnerability occurring while testing scripts has been fixed (Reported by Pulse Security).
  • OpManager: Path Traversal vulnerability in uploadMib API has been fixed (Reported by Pulse Security).
  • OpManager: Unauthorised access for uploadMib API has been restricted. It can be accessed only by users with admin privileges.
  • OpManager: Previously, any type of input was accepted in UpdateDeviceDetails API’s parameter. This issue has been fixed (Reported by Pulse Security).

  • OpManager: Previously, OpManager files could be changed or modified by exploiting LFI vulnerability in uploadBusinessViewBG, importDeviceTemplate API. This issue has been fixed.

 

 

 

Build Release

You may be interested in these other recent articles

6 Dec

Last Week’s Best ManageEngine Updates – Part 30

6 December 2023 | Nazim Nadir


ManageEngine is named a strong performer for 2023 in last week updates. There are also new updates to their suite of applications and they have…

Read more
27 Nov

Last Week’s Best ManageEngine Updates – Part 29

27 November 2023 | Nazim Nadir


Exciting news of ManageEngine Linkedin Live webinar has been announced alongside some application updates and the release of a new E-Book. Whether you’re new to…

Read more
30 Oct

Last Week’s Best ManageEngine Updates – Part 28

30 October 2023 | Nazim Nadir


Updates on stability have been made by ManageEngine to enhance your end-user experience with their products. Continue reading to learn which ManageEngine applications gain the…

Read more