An Improper Authentication Issue

Affected Versions: 10.0.647 and above

Fixed on: June 24, 2022

Note: This issue is only applicable to Desktop Central on-premises users who have integrated Jira Service Management Cloud.


Details:

In Desktop Central on-premises set-ups with Jira Cloud integration, an improper authentication issue was internally identified, fixed and released in the latest build.

Impact:

If left unpatched, this could allow an adversary to gain unauthorized access to Desktop Central on-premises setups with Jira Cloud integration.

Steps to Upgrade:

  1. Login to your Desktop Central console, click on your current build number on the top right corner.
  2. You'll be able to find the latest build applicable to you. Download the PPM and update.

Exploitation and Public Announcements:

There are no known public exploits or malicious use of the issue described in this advisory.

Help:

For any further questions on this, please write to our support team at endpointcentral-support@manageengine.com.

Disclaimer: This issue does not affect Jira Service Management Cloud in any way and no action is required on their software.