{"uuid": "93f9bae8-844c-4c33-874c-432cbe19394e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-10189", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/desktopcentral_deserialization.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x86, x64\", \"author\": [\"mr_me\", \"wvu \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Java deserialization vulnerability in the\\n          getChartImage() method from the FileStorage class within ManageEngine\\n          Desktop Central versions < 10.0.474. Tested against 10.0.465 x64.\\n\\n          Quoting the vendor's advisory on fixed versions:\\n\\n          \\\"The short-term fix for the arbitrary file upload vulnerability was\\n          released in build 10.0.474 on January 20, 2020. In continuation of\\n          that, the complete fix for the remote code execution vulnerability is\\n          now available in build 10.0.479.\\\"\", \"disclosure_date\": \"2020-03-05\", \"fullname\": \"exploit/windows/http/desktopcentral_deserialization\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"ManageEngine Desktop Central Java Deserialization\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"first-attempt-fail\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"service-resource-loss\"]}, \"path\": \"/modules/exploits/windows/http/desktopcentral_deserialization.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/http/desktopcentral_deserialization\", \"references\": [\"CVE-2020-10189\", \"URL-https://srcincite.io/advisories/src-2020-0011/\", \"URL-https://srcincite.io/pocs/src-2020-0011.py.txt\", \"URL-https://twitter.com/steventseeley/status/1235635108498948096\", \"URL-https://www.manageengine.com/products/desktop-central/remote-code-execution-vulnerability.html\"], \"rport\": 8383, \"session_types\": false, \"targets\": [\"Windows Command\", \"Windows Dropper\", \"PowerShell Stager\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:44.054978Z"}