ManageEngine Desktop Central 10 < Build 100282 Remote Privilege Escalation

The ManageEngine Desktop Central application running on the remote host is version 10 prior to build 100282. It is, therefore, affected by a remote privilege escalation vulnerability. C Tenable, Inc. include'compat.inc'; if description scriptid117639; scriptversion"1.7";...

CVE-2018-13411

CVE-2018-13411 affects Zoho ManageEngine Desktop Central prior to 10.0.282. A clickable company logo in a window running as SYSTEM allows privilege escalation. In cloud, the issue is fixed in 10.0.470 agent version; on-prem mitigation is upgrade/build 100282 (as referenced by the Nessus plugin). ...