Ivanti LANDESK Management Suite Arbitrary File Upload Vulnerability

The Ivanti LANDESK Management Suite allows you to manage all client systems easily and efficiently. An arbitrary file upload vulnerability exists in the upl/asyncupload.asp web API endpoint in Ivanti LANDESK Management Suite 10.0.1.168 Service Update 5. An attacker can exploit this vulnerability ...

CVE-2019-12377: Unrestricted Upload of File with Dangerous Type

A vulnerable upl/asyncupload.asp web API endpoint in Ivanti LANDESK Management Suite LDMS, aka Endpoint Manager 10.0.1.168 Service Update 5 allows arbitrary file upload, which may lead to arbitrary remote code execution...