LoginSign Up
← Back to all sparks
M

ManageEngine Log360

ANALYTICS
Velocity0.0

Integrated SIEM solution with log management, threat detection, and compliance auditing.

www.manageengine.com/log-management ↗

Log360's September build fixes the migration to the unified console.

siemplatform-consolidationlog-managementcve-remediationmigration
◆Current state
ManageEngine Log360 is consolidating its components into Unified Log360, with a PPM in June that lets standalone deployments migrate. Builds since then mix security fixes, including an unauthenticated collector registration bypass and an authentication bypass in August, with marketplace extensions for CrowdStrike, Okta and Bitdefender. Build 13073 in September is a set of hotfixes for migration problems: failed dashboard migrations, IAM errors after login, and notification settings not saving.
◆Where it's heading
The migration to the unified architecture is generating its own stream of fixes, while security patches continue at a monthly pace. Integrations are moving into marketplace extensions rather than core builds.
◆Prediction
More hotfix builds for the unified migration are likely; no new build has appeared in the feed since mid-September.

◆Recent moves

  1. 1mo ago

    Build 13073: fixes for Unified Log360 migration issues

    A hotfix build for problems after moving to Unified Log360: dashboard migrations failing on legacy widgets, IAM errors after login, and unresolved text in tab titles. It shows the consolidation still being debugged in customer deployments.

  2. 2mo ago

    Two auth-bypass CVEs patched; PostgreSQL and Tomcat bumped

    A security-weighted build closing an unauthenticated collector registration bypass that let an actor impersonate a trusted local collector, plus an authentication bypass permitting login as another user. It also lifts bundled PostgreSQL and Tomcat and fixes agent memory on terabyte-scale File Integrity Monitoring, the kind of ceiling only large deployments hit.

  3. 2mo ago

    CrowdStrike, Okta and Bitdefender ship as marketplace extensions

    Bitdefender GravityZone, CrowdStrike Falcon Event Streams, Okta, and MikroTik land as marketplace extensions rather than core integrations, and extensions gain their own Dashboard tab. It broadens both the connector catalogue and what a third-party extension is allowed to own in the interface.

  4. 3mo ago

    Applying multiple service packs in one pass no longer fails

    A narrow fix for applying several service packs in sequence without restarting Log360 in between. Upgrade-path plumbing that matters only during maintenance windows.

  5. 4mo ago

    Three CVEs closed, including two authenticated RCE paths

    Three CVEs closed, two of them authenticated remote code execution — one in the remote agent installation workflow, one reachable by users holding log forwarding and filtering privileges. Both sit in exactly the delegated-permission surface a SIEM hands to operators.

  6. 4mo ago

    Standalone Log360 can now migrate to the Unified Log360 architecture

    ⚡ SPARK

    This PPM makes Unified Log360 reachable for the installed base: eligible standalone Log360 deployments, and those integrated with EventLog Analyzer, can migrate supported configurations to the unified architecture. It converts consolidation from a greenfield option into the destination for existing customers, and the surrounding migration bug fixes show the transition is actively underway.