CVE-2025-43716

A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. By appending %3F.php to the URI of the /client/index.php endpoint, an attacker can bypass access controls and gain unauthorized access to various endpoints such as...

Ivanti LANDesk Management Gateway Directory Traversal Vulnerability

Ivanti LANDesk Management Gateway is a solution for remote management and control of IT devices, primarily designed to simplify the management and maintenance of devices in corporate environments. A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway. The vulnerability...

CVE-2025-43716

A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. By appending %3F.php to the URI of the /client/index.php endpoint, an attacker can bypass access controls and gain unauthorized access to various endpoints such as...

CVE-2025-43716

A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. By appending %3F.php to the URI of the /client/index.php endpoint, an attacker can bypass access controls and gain unauthorized access to various endpoints such as...

CVE-2025-43716

CVE-2025-43716 describes a directory traversal in Ivanti LANDesk Management Gateway up to version 4.2-1.9. By appending “%3F.php” to the URI of /client/index.php, an attacker can bypass access controls and access endpoints such as /client/index.php%3F.php/gsb/firewall.php in the management web pa...

Ivanti LANDesk Management Gateway 安全漏洞

Ivanti LANDesk Management Gateway is a solution for remote management and control of IT devices, primarily designed to simplify the management and maintenance of devices in corporate environments. A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway. The vulnerability...

PT-2025-17626 · Ivanti · Ivanti Landesk Management Gateway

Name of the Vulnerable Software and Affected Versions: Ivanti LANDesk Management Gateway versions 4.2-1.9 Description: A directory traversal issue exists, allowing an attacker to bypass access controls and gain unauthorized access to various endpoints within the management web panel by appending...

CVE-2025-43716

A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. By appending %3F.php to the URI of the /client/index.php endpoint, an attacker can bypass access controls and gain unauthorized access to various endpoints such as...

CVE-2022-27773

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

Privilege escalation

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

CVE-2022-27773

A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...

Ivanti LANDESK Management Suite 安全漏洞

Ivanti LANDESK Management Suite LDMS is a suite of endpoint security management software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti LANDESK Management Suite that originates from allowing a user to execute commands with elevated privileges...

CVE-2022-27773

CVE-2022-27773 is a privilege escalation vulnerability affecting Ivanti EPM (LANDesk Management Suite) where a user can execute commands with elevated privileges. The advisory notes impact on Ivanti Endpoint Manager Client prior to certain updates, allowing command execution on the system. The Re...

Ivanti Endpoint Manager Elevation of Privilege Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An elevation of privilege vulnerability exists in Ivanti Endpoint Manager, which stems from the "LANDeskR Management Agent" service exposing a socket that, once connected, can be used to launch commands only fo...

CVE-2022-30121

The “LANDeskR Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system...

CVE-2022-30121

The “LANDeskR Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system...

Information disclosure

The “LANDeskR Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system...

CVE-2022-30121

The “LANDeskR Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system...

CVE-2022-30121

CVE-2022-30121 affects Ivanti/LANDesk Management Agent. The vulnerability arises because the LANDesk Management Agent service exposes a socket that, once connected, allows execution of commands only for signed executables, enabling a limited user to escalate to admin privileges on the host. Docum...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An elevation of privilege vulnerability exists in Ivanti Endpoint Manager, which stems from the "LANDeskR Management Agent" service exposing a socket that, once connected, can be used to launch commands only fo...