PT-2020-13673 · Ivanti · Ivanti Endpoint Manager

Andrei Constantin Scutariu + 2 · Published 2020-11-12 · Updated 2020-12-02 · CVE-2020-13774

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions 2019.1 through 2020.1

Description The issue is caused by an unrestricted file-upload problem in the EditLaunchPadDialog.aspx file, allowing an authenticated attacker to achieve remote code execution by uploading a malicious aspx file. This is due to insufficient file extension validation and insecure file operations on the uploaded image. If the upload fails, the temporarily created files are left in an accessible location on the server.

Recommendations For Ivanti Endpoint Manager versions 2019.1 through 2020.1, consider restricting access to the EditLaunchPadDialog.aspx file until a patch is available, and ensure proper file extension validation and secure file operations are in place to prevent malicious file uploads.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-13774

Affected Products

Ivanti Endpoint Manager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-13774 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13774 · Vendor Advisory
• https://labs.jumpsec.com/advisory-cve-2020-13774-ivanti-uem-rce · Note