CVE-2020-10541

Remote Code Execution (RCE) vulnerability in Mail Server Settings v1 APIs

 

Vulnerability Details
ImpactCVSS V3 rating: NA
Reported13th March 2020
Reported byJason Nordenstam
Fixed13th March 2020
Affected BuildsBuilds till 124171
Fixed inBuild 124172
OverviewRemote Code Execution (RCE) vulnerability in Mail Server Settings
Recommended FixUpgrade to OpManager Plus Version 12.4.172 or above.

 

Description

The obsolete code causing Remote Code Execution (RCE) vulnerability in Mail Server Settings v1 APIs have been removed.

We recommend that you upgrade to OpManager Plus Version 12.4.172 or contact our support team at opmanagerplus-support@manageengine.com to fix this issue.

Source and Acknowledgements

Find out more about CVE-2020-10541 from the CVE dictionary.

Need Help?

For clarification or corrections please contact our support team or email us at opmanagerplus-support@manageengine.com.

Video Zone
OpManager Customer Videos
Michael Senatore, Operations Manager, Rojan Australia Pty Ltd.
  
  •  Venkatesan Veerappan, IT Consultant
     Mohd Jaffer Tawfiq Murtaja, Information Security officer from Al Ain sports club
  •  Jonathan ManageEngine Customer
     IT Admin from "Royal flying doctor service", Australia
  •  Michael Senatore, Operations Manager, Rojan Australia Pty Ltd.
     Michael - Network & Tech, ManageEngine Customer
  •  Altaleb Alshenqiti - Ministry of National Guard - Health Affairs
     Donald Stewart, IT Manager from Crest Industries
  •  John Rosser, MIS Manager - Yale Chase Equipment & Services
     David Tremont, Associate Directory of Infrastructure,USA