CVE-2022-35258

CVE-2022-35258 affects Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Neurons for Zero-Trust Access. Affected versions include ICS pre-9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4; IPS pre-9.1R17 and 22.3R1; Neurons for Zero-Trust Access pre-22.3R1. The flaw allows an unauthentic...

Ivanti LANDESK Management Suite 安全漏洞

Ivanti LANDESK Management Suite LDMS is a suite of endpoint security management software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti LANDESK Management Suite that originates from allowing a user to execute commands with elevated privileges...

CVE-2022-27773

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

PT-2022-22661 · Ivanti · Ivanti Policy Secure +2

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 9.1R14.3 Ivanti Connect Secure versions prior to 9.1R15.2 Ivanti Connect Secure versions prior to 9.1R16.2 Ivanti Connect Secure versions prior to 22.2R4 Ivanti Policy Secure versions prior to 9.1R17...

PT-2022-22663 · Ivanti · Ivanti Policy Secure +2

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure ICS versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4 Ivanti Policy Secure IPS versions prior to 9.1R17 and 22.3R1 Ivanti Neurons for Zero-Trust Access versions prior to 22.3R1 Description: An unauthenticated...

CVE-2022-35254

An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure ICS in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure IPS in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior...

CVE-2022-27773

CVE-2022-27773 is a privilege escalation vulnerability affecting Ivanti EPM (LANDesk Management Suite) where a user can execute commands with elevated privileges. The advisory notes impact on Ivanti Endpoint Manager Client prior to certain updates, allowing command execution on the system. The Re...

CVE-2022-35254

An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure ICS in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure IPS in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior...

CVE-2022-27773

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager version 2022.3 and prior versions, which can be exploited by an attacker to cause a malicious file to be downloaded, run, and potentially...

Security Advisory for Ivanti Endpoint Manager Client-CVE-2022-27773

SECURITY ADVISORY 2022-11-16 Product Affected: Ivanti EPM Endpoint Manager PROBLEM: A vulnerability was recently discovered for Ivanti Endpoint Manager Client. Vulnerability InformationCVE| CVSS| Summary ---|---|--- CVE-2022-27773CVE | High - CVSS=7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | An issu...

Ivanti Avalanche Enterprise Service SQL Injection (CVE-2021-42131)

An SQL injection vulnerability exists in the Ivanti Avalanche EnterpriseServer service. The vulnerability is due to insufficient validation of data sent to the EnterpriseServer service...

Ivanti Avalanche Enterprise Service Command Injection (CVE-2021-42129)

A command injection vulnerability exists in Ivanti Avalanche Enterprise Service. This vulnerability is due to insufficient validation of the Central FileStore configuration fields...

Ivanti Avalanche DataRepository Service Insecure Deserialization (CVE-2021-42130)

An insecure deserialization vulnerability exists in the Ivanti Avalanche DataRepository service. The vulnerability is due to insufficient validation of serialized data sent to the DataRepository service...

Ivanti Avalanche EnterpriseServer Service setUser Authentication Bypass (CVE-2021-42128)

A authentication bypass vulnerability exists in the Ivanti Avalanche Enterprise Server. The vulnerability is due to lack of authentication for certain functionality...

Ivanti Avalanche PrinterDeviceServer Service Command Injection (CVE-2021-42132)

A command injection vulnerability exists in Ivanti Avalanche PrinterDeviceServer Service. This vulnerability is due to insufficient input validation in the runAgentRestarter method...

Vulnerabilities fixed in Ivanti Connect Secure

Vulnerabilities have been fixed in Ivanti Connect Secure. The vulnerabilities allow an unauthenticated remote malicious person to remotely capable of causing a denial-of-service. At this time, Ivanti has made very little additional information made available. Ivanti has released updates to fix th...

Ivanti Endpoint Manager Elevation of Privilege Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An elevation of privilege vulnerability exists in Ivanti Endpoint Manager, which stems from the "LANDeskR Management Agent" service exposing a socket that, once connected, can be used to launch commands only fo...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An elevation of privilege vulnerability exists in Ivanti Endpoint Manager, which stems from the "LANDeskR Management Agent" service exposing a socket that, once connected, can be used to launch commands only fo...

Ivanti EPM Cloud Services Appliance Code Injection (CVE-2021-44529)

A code injection vulnerability exists in Ivanti Endpoint Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...