[et_pb_section fb_built=”1″ admin_label=”section” _builder_version=”3.0.47″ custom_padding=”0|0px|57px|0px|false|false”][et_pb_row custom_padding=”0|0px|0|0px|false|false” admin_label=”row” _builder_version=”3.0.48″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.0.47″ parallax=”off” parallax_method=”on”][et_pb_text _builder_version=”3.19.3″ text_font=”||||||||” text_font_size=”14px” background_size=”initial” background_position=”top_left” background_repeat=”repeat”]

Bug Fixes

  • Earlier, while configuring remote password reset and auto logon actions for Windows, Windows Domain, and Linux resources, administrators could view the accounts of resources that they had no access to. However, only the account names were visible in this case and there was no password exposure involved. This was applicable for bulk configurations as well. This has been fixed.
  • From v9700, the PDF file for user activity, user access and password inventory reports that were scheduled had file corruption error when delivered as an email attachment. This has been fixed.
  • From v9700, during service startup, a server-side action resulted in Password Manage Pro’s system properties getting printed in the log files. The keystore password of the certificate that was used for HTTPS connections from the web server was also printed in plain text in the captured logs. This has been fixed.

Security Fix

  • From v9700, for customers who had enabled the SSL certificate management add-on and invoked the certificate discovery from the GUI, it resulted in the credentials used for discovery getting printed in the logs. This has been fixed.

Note: 
The potential for exposure was limited only to customers matching specific conditions and a detailed advisory was sent to customers to check for those conditions and in the unlikely case of the exposure happening, the advisory included instructions to sanitise the exposure and fix the conditions.

[/et_pb_text][/et_pb_column][/et_pb_row][et_pb_row custom_padding=”0|0px|0|0px|false|false” _builder_version=”3.17.2″][et_pb_column type=”4_4″ _builder_version=”3.0.47″ parallax=”off” parallax_method=”on”][et_pb_cta title=”Need help with your update?” button_url=”https://manageenginesales.co.uk/contact/” button_text=”Contact Us” _builder_version=”3.17.2″ header_font_size=”34px” body_font_size=”17px” background_color=”#7cb649″ button_alignment=”center” animation_style=”bounce” background__hover_enabled=”on”]Receive expert assistance from set3 Solutions.[/et_pb_cta][/et_pb_column][/et_pb_row][et_pb_row _builder_version=”3.17.2″][et_pb_column type=”1_2″ _builder_version=”3.0.47″ parallax=”off” parallax_method=”on”][et_pb_image src=”https://manageenginesales.co.uk/wp-content/uploads/2018/03/SET-3-SOLUTIONS-LOGO-large-2-directpartnertext-cropped-museo.png” _builder_version=”3.17.2″ max_width=”60%” module_alignment=”right”][/et_pb_image][/et_pb_column][et_pb_column type=”1_2″ _builder_version=”3.0.47″ parallax=”off” parallax_method=”on”][et_pb_image src=”https://manageenginesales.co.uk/wp-content/uploads/2018/09/techpartner.png” _builder_version=”3.17.2″ max_width=”40%” module_alignment=”left”][/et_pb_image][/et_pb_column][/et_pb_row][/et_pb_section]
Build Release

You may be interested in these other recent articles

18 Feb

ManageEngine’s IAM and Cybersecurity On-Demand Events Hub

18 February 2022 | Joshua Ball


Watch webinars on demand and listen to podcasts at your convenience. ManageEngine has launched their IAM and Cybersecurity on-demand events hub, a one-stop shop for on-demand webinars and podcasts. At the on-demand events hub, you’ll find:   Carefully curated on-demand webinars from seven unique categories. Over 40 podcast episodes (and counting) on IAM and cybersecurity from three different podcast shows. ​ The webinars and podcasts are regularly updated, so watch this space to ensure you don’t miss out on the latest episodes!​​ Sign up today by clicking here. To find out more…

Read more
8 Sep

ManageEngine positioned in the Gartner® Magic Quadrant™ for ITSM Tools for the second consecutive year

8 September 2021 | Nigel Arnold


The 2021 Gartner® Magic Quadrant™ for IT Service Management Tools is out, and ManageEngine has been included in this year’s report. This is the second…

Read more
26 Jan

Cybersecurity Webinar Series – February 2021

26 January 2021 | Joshua Ball


IT Security Under Attack Join ManageEngine on a three day webinar series, where they will expose and explore the various tactics threat-actors use to intrude…

Read more