PT-2019-11964 · Ivanti · Ivanti Endpoint Manager

Published 2019-07-11 · Updated 2020-08-24 · CVE-2019-10651

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager (EPM) versions 2017.3 through 2018.3 before SU3 and before the April 2019 update Ivanti Endpoint Manager (EPM) version 2018.1

Description An issue was discovered in the Core Server of Ivanti Endpoint Manager (EPM) that allows remote code execution.

Recommendations For Ivanti Endpoint Manager (EPM) versions 2017.3 through 2018.3 before SU3, apply the April 2019 update to resolve the issue. For Ivanti Endpoint Manager (EPM) version 2018.1, apply the April 2019 update to resolve the issue.

Fix

Related Identifiers

CVE-2019-10651

Affected Products

Ivanti Endpoint Manager

References · 3

• https://osv.dev/vulnerability/CVE-2019-10651 · Vendor Advisory
• https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10651 · Security Note