ManageEngine Applications Manager – Build 13740 Released

Issues fixed in 13740

• We have fixed the issue of authentication failure in Mail Server monitors after upgrading to mail-1.4.6.jar. This issue affected builds 13600 to 13730 
• Currently, only the servers under the host controllers are identified and added for JBoss cluster set up. Servers deployed under the domain controller were not being identified and added. This issue is fixed and now the servers under domain controller are also detected.
• The issue in collecting AWS S3 buckets data due to removal of the CRIMSON.jar file is fixed. This issue affected builds 13680 to 13730.

Security Vulnerability issues:

• Post-authentication SQL injection vulnerability in the HostResourceAction class when the “resourceid” parameter is used in SQL queries without sanitization. This vulnerability is fixed.
• Arbitrary File Deletion and Reading of File using the CustomFieldsFeedServlet.  This vulnerability is fixed.

Minor Enhancements in Build 13740

• In Amazon Monitoring, we now collect operating system-level metrics like Memory and Disk from EC2 instances.