CVE-2019-12376: Medium severity landesk server manager vulnerability
Use of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to full managed endpoint compromise by an authenticated user with read privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12376?
CVE-2019-12376 has been classified as a critical vulnerability due to the potential for full managed endpoint compromise.
How do I fix CVE-2019-12376?
To mitigate CVE-2019-12376, upgrade Ivanti LANDESK Management Suite to a version that does not use a hard-coded encryption key.
Who is affected by CVE-2019-12376?
CVE-2019-12376 affects users of Ivanti LANDESK Management Suite version 10.0.1.168 Service Update 5.
Can an authenticated user exploit CVE-2019-12376?
Yes, an authenticated user with read privileges can exploit CVE-2019-12376 to compromise the managed endpoints.
What are the implications of CVE-2019-12376?
The implications of CVE-2019-12376 include potential full control over managed endpoints, leading to data breach or unauthorized access.