CVE Vulnerabilities

CVE-2024-10203

Improper Privilege Management

Published: Nov 07, 2024 | Modified: Nov 21, 2025
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Manageengine_endpoint_central Zohocorp * 11.3.2416.21 (including)
Manageengine_endpoint_central Zohocorp 11.3.2428.01 (including) 11.3.2428.09 (including)

Potential Mitigations

References