PT-2019-12769 · Ivanti · Ivanti Landesk Management Suite

Published 2019-06-03 · Updated 2020-08-24 · CVE-2019-12375

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) version 10.0.1.168 Service Update 5

Description The issue in Ivanti LANDESK Management Suite may lead to remote information disclosure and arbitrary code execution due to open directories.

Recommendations For version 10.0.1.168 Service Update 5, consider restricting access to sensitive directories to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2019-12375

Affected Products

Ivanti Landesk Management Suite

References · 3

• https://osv.dev/vulnerability/CVE-2019-12375 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12375 · Security Note
• https://gnzlabs.io/gnzlabs-blog/landesk-management-server-open-directories · Note