Improper Access Control in Ivanti LANDESK Management Suite Products

CVE-2019-12373

Summary

An improper access control vulnerability exists in Ivanti LANDESK Management Suite (LDMS), also known as Endpoint Manager. This issue allows unauthorized users to access sensitive information, potentially leading to the remote disclosure of administrator passwords. Specifically, the flaw resides in its open directory structure and inadequate permission settings, which could be exploited by attackers to gain unauthorized access to the management interface. Organizations using vulnerable versions should promptly assess their configurations and apply necessary security measures to mitigate risks.

References