CVE-2020-13771

Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain…

published November 12, 2020

CVSS
—
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain conditions) one to gain code execution (and elevation of privileges to the level of privilege held by the vulnerable component such as NT AUTHORITY\SYSTEM) via DLL hijacking. This affects ldiscn32.exe, IpmiRedirectionService.exe, LDAPWhoAmI.exe, and ldprofile.exe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00785 · 55.6th percentile
Published
2020-11-12T17:13Z
EPSS history
Timeline
  • 12 NOV 17:13Z
    Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain…
    cvelistv5