ManageEngine (Applications Manager) Product January 2025 Security Update Advisory

Overview

 

Zoho(https://www.zohocorp.com/) has released a security update that addresses a vulnerability in its ManageEngine suite of products. Users of affected products are advised to update to the latest version.

 

Affected Products

 

Applications Manager v173900 or below

 

Resolved Vulnerabilities

 

High Impact Improper Authorization Vulnerability in Applications Manager(CVE-2024-41140) [1]

 

Vulnerability Patches

 

Please follow the security advisory published on January 29, 2019 to update to the applicable version and the latest version.

Applications Manager versions 170008 through 170099

Applications Manager versions 173303 through 173399

Applications Manager 174000 and later versions at least

 

Referenced Sites

 

[1] CVE-2024-41140 – Improper Authorization

https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2024-41140.html