ManageEngine Password Manager Pro 13236
ManageEngine Password Manager Pro 13.2 Build 13236 is a security-focused maintenance release that addresses multiple critical vulnerabilities, including authenticated remote code execution, broken access control, authorization bypass, and XML External Entity (XXE) issues. Organizations should prioritize upgrading to this build to mitigate the identified security risks.
- Fixed authenticated remote code execution (RCE) vulnerabilities that could allow low-privileged users to execute arbitrary commands.
- Resolved broken access control vulnerabilities affecting unshared resources, Linux private keys, and SSH keys.
- Fixed an authorization bypass vulnerability that could allow unauthorized operations.
- Addressed an XML External Entity (XXE) vulnerability to prevent XML parser exploitation.
What's new
ManageEngine Password Manager Pro 13.2 Build 13236 is a security update that resolves several important vulnerabilities identified in previous builds.
Security fixes- Fixed authenticated remote code execution (RCE) vulnerabilities that could allow low-privileged users to execute arbitrary commands.
- Resolved broken access control vulnerabilities that allowed low-privileged users to perform unauthorized actions on unshared resources, private keys associated with Linux resources, and SSH keys.
- Fixed an authorization bypass vulnerability.
- Addressed an XML External Entity (XXE) vulnerability.
Because this release addresses multiple security vulnerabilities affecting privilege enforcement and remote code execution, administrators are strongly encouraged to upgrade to Build 13236 as soon as possible to reduce security risk.
π¬ Comments (0)
Share any installation issues, compatibility changes, or fixes you noticed.