CVE-2019-12876

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus version 6.6.5 Zoho ManageEngine ADSelfService Plus version 5.7 Zoho ManageEngine DesktopCentral version 10.0.380

Description The issue is related to Insecure Permissions, which can lead to Privilege Escalation from low-level privileges to System. This allows an attacker to gain higher privileges than intended.

Recommendations For Zoho ManageEngine ADManager Plus version 6.6.5, update the permissions configuration to ensure proper access control. For Zoho ManageEngine ADSelfService Plus version 5.7, restrict access to sensitive features to prevent exploitation. For Zoho ManageEngine DesktopCentral version 10.0.380, consider disabling any features that rely on the insecure permissions until a proper fix is applied.