PT-2019-11964 · Ivanti · Ivanti Endpoint Manager

Publicado 2019-07-11 · Atualizado 2020-08-24 · CVE-2019-10651

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager (EPM) versions 2017.3 through 2018.3 before SU3 and before the April 2019 update Ivanti Endpoint Manager (EPM) version 2018.1

Description An issue was discovered in the Core Server of Ivanti Endpoint Manager (EPM) that allows remote code execution.

Recommendations For Ivanti Endpoint Manager (EPM) versions 2017.3 through 2018.3 before SU3, apply the April 2019 update to resolve the issue. For Ivanti Endpoint Manager (EPM) version 2018.1, apply the April 2019 update to resolve the issue.

Correção

Identificadores relacionados

CVE-2019-10651

Produtos afetados

Ivanti Endpoint Manager

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-10651 · Aviso do Fabricante
• https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10651 · Nota de Segurança