2 matches found
Arbitrary file deletion
An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an...
4CVSS6.3AI score0.01539EPSS
SaveExploits0References2Affected Software1
CVE-2023-38344: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an...
6.5CVSS6.8AI score0.01539EPSS
SaveExploits0References2
20