# Privilege Escalation in Action Log viewer

This document explains you how to mitigate the privilege escalation vulnerability in action log viewer reported by Ranjit Pahan.

## What was the problem?

Action log viewer data was accessible to unauthorized users due to improper access control.

## How was the problem resolved?

Appropriate role access handling has been done for action log view data.

## How do I fix it?

This issue has been fixed in Vulnerability Manager Plus build 10.0.708.

To apply this fix, follow the steps below:

- Log in to your Vulnerability Manager Plus console, click on your current build number on the top right corner.
- You can find the latest build applicable to you. Download the PPM and update it.
- Please contact support for further details at vulnerabilitymanagerplus-support@manageengine.com.

Keywords: Security Updates, Vulnerabilities and Fixes.