CVE-2020-13769

LDMS/alertlog.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request...

CVE-2020-13769

LDMS/alertlog.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request...

CVE-2020-13769

CVE-2020-13769 affects Ivanti Endpoint Manager (LDMS/alert_log.aspx) via the /remotecontrolauth/api/device endpoint, enabling SQL Injection through a user-controlled request. Public documents confirm the vulnerability exists in Ivanti Endpoint Manager up through version 2020.1 (and prior per CNVD...