CVE-2019-12373

Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote…

published June 3, 2019

CVSS
—
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is

⚠️ A simple oversight in Ivanti LANDESK can expose administrator passwords to anyone who knows where to look! 🔍 Think of it like a hotel that forgot to lock the doors to the staff-only areas. Anyone could stroll in and find sensitive information just lying around! If an attacker gains access, they could potentially reveal administrator passwords, compromising the entire system's security. This means unauthorized access to critical controls and data, putting the entire environment at risk. It's like leaving the vault open and letting anyone take a peek inside!

Put simply

Think of it like a hotel that forgot to lock the doors to the staff-only areas. Anyone could stroll in and find sensitive information just lying around! This vulnerability stems from improper access controls and open directories in Ivanti LANDESK Management Suite (LDMS) version 10.0.1.168 Service Update 5, allowing remote disclosure of sensitive information such as administrator passwords.

What to do

If an attacker gains access, they could potentially reveal administrator passwords, compromising the entire system's security. This means unauthorized access to critical controls and data, putting the entire environment at risk. It's like leaving the vault open and letting anyone take a peek inside! To protect yourself, ensure you apply the latest updates and patches available for Ivanti LANDESK. Audit your access controls to ensure directories are properly secured and not exposed to unauthorized users. Regularly review your security policies to prevent similar issues in the future. You’ve got this! With a little diligence, you can secure your setup and keep those passwords locked up tight! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01010 · 62.8th percentile
Published
2019-06-03T19:27Z
EPSS history
Timeline
  • 03 JUN 19:27Z
    Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote…
    cvelistv5