CVE-2020-13771

Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a nonexistent library file, allowing under certain conditions one to gain code execution and elevation of privileges to the level of privilege held by the vulnerable component such as NT...

CVE-2020-13771

CVE-2020-13771 affects Ivanti Endpoint Manager up to 2020.1.1. The vulnerability arises when certain executables (ldiscn32.exe, IpmiRedirectionService.exe, LDAPWhoAmI.exe, ldprofile.exe) load a nonexistent library file, relying on Windows search order, which can lead to code execution and privile...

CVE-2020-13771

Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a nonexistent library file, allowing under certain conditions one to gain code execution and elevation of privileges to the level of privilege held by the vulnerable component such as NT...