PT-2020-13673

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions 2019.1 through 2020.1 Description The issue is caused by an unrestricted file-upload problem in the EditLaunchPadDialog.aspx file, allowing an authenticated attacker to achieve remote code execution by uploadin...

CVE-2020-13774: Unrestricted Upload of File with Dangerous Type

An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker to gain remote code execution by uploading a malicious aspx file. The issue is caused by insufficient file extension validation and insecure file operations ...