CVE-2019-10651: Critical severity ivanti endpoint manager (epm) vulnerability

Published Jul 11, 2019

Updated

An issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote code execution. In other words, the issue affects 2017.3, 2018.1, and 2018.3 installations that lack the April 2019 update.

Affected Software

3 affected components

Ivanti Endpoint Manager=2017.3

Ivanti Endpoint Manager=2018.1

Ivanti Endpoint Manager=2018.3

Remediation

Patch Available

https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019

Event History

Jul 11, 2019

CVE Published

via MITRE·05:31 PM

Data Sourced

via MITRE·05:31 PM

Description

Frequently Asked Questions

What is CVE-2019-10651?

CVE-2019-10651 is a vulnerability in Ivanti Endpoint Manager (EPM) that allows remote code execution.

Which versions of Ivanti Endpoint Manager are affected by CVE-2019-10651?

Ivanti Endpoint Manager versions 2017.3, 2018.1, and 2018.3 are affected by CVE-2019-10651.

How severe is CVE-2019-10651?

CVE-2019-10651 has a severity rating of 9.8, which is classified as critical.

How can I fix CVE-2019-10651?

To fix CVE-2019-10651, you should apply the April 2019 update for Ivanti Endpoint Manager version 2017.3, 2018.1, or 2018.3.

Where can I find more information about CVE-2019-10651?

More information about CVE-2019-10651 can be found at the following reference: [https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019](https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019)