CVE-2020-13770

Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes; as these services…

published November 12, 2020

CVSS
—
EPSS
0%
Percentile
39.4
In the wild
Unconfirmed
What it is

Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes; as these services run as user ‘NT AUTHORITY\SYSTEM’, the issue can be used to escalate privileges from a local standard or service account having SeImpersonatePrivilege (eg. user ‘NT AUTHORITY\NETWORK SERVICE’).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00466 · 39.4th percentile
Published
2020-11-12T17:38Z
EPSS history
Timeline
  • 12 NOV 17:38Z
    Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes; as these services…
    cvelistv5