Ivanti Endpoint Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Ivanti Endpoint Manager (EPM), a set of endpoint security managers from Ivanti, Inc. The vulnerability stems from the fact that the “LANDesk® Management Agent” service exposes a socket that, once connected, can launch commands for only signed An attacker could exploit the vulnerability to cause an elevation of privilege by launching commands for signed executables only.