PT-2019-12769 · Ivanti · Ivanti Landesk Management Suite

Publicado 2019-06-03 · Atualizado 2020-08-24 · CVE-2019-12375

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Média

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) version 10.0.1.168 Service Update 5

Description The issue in Ivanti LANDESK Management Suite may lead to remote information disclosure and arbitrary code execution due to open directories.

Recommendations For version 10.0.1.168 Service Update 5, consider restricting access to sensitive directories to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-552

Identificadores relacionados

CVE-2019-12375

Produtos afetados

Ivanti Landesk Management Suite

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-12375 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12375 · Nota de Segurança
• https://gnzlabs.io/gnzlabs-blog/landesk-management-server-open-directories · Nota