Arbitrary File Deletion Vulnerability in EndPoint Central Agents

CVE-2024-10203

Summary

ManageEngine EndPoint Central versions 11.3.2416.21 and earlier, along with version 11.3.2428.9 and below, are susceptible to an arbitrary file deletion flaw within the agent installed on user machines. This vulnerability could allow an attacker to manipulate file access controls, potentially leading to unauthorized deletion of crucial files. Organizations utilizing affected versions are advised to evaluate their security posture and apply necessary patches or mitigations to safeguard against potential exploitation.

References