PT-2017-6600

Name of the Vulnerable Software and Affected Versions Manage Engine Desktop Central version 9 before build 90135 Description The issue allows remote attackers to change passwords of users with the Administrator role. This is achieved via an addOrModifyUser operation to the...

CVE-2015-2560: Undefined Security Weakness

Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet...