PT-2022-20013 · Landesk · Landesk Management Agent

Published 2022-09-23 · Updated 2022-10-01 · CVE-2022-30121

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LANDesk(R) Management Agent (affected versions not specified)

Description The issue allows a limited user to gain escalated admin privileges on their system by exploiting the LANDesk(R) Management Agent service, which exposes a socket. Once connected to this socket, it is possible to launch commands, but only for signed executables. This security bug can lead to privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2022-30121

Affected Products

Landesk Management Agent

References · 4

• https://forums.ivanti.com/s/article/Security-Advisory-for-Ivanti-Endpoint-Manager-Client-CVE-2022-30121?language=en_US · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-30121 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30121 · Security Note
• https://t.me/cibsecurity/50348 · Telegram Post