PT-2020-13669
CVE-2020-13770
·
تاريخ النشر
2020-11-12
·
تاريخ التحديث
2020-11-24
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Ivanti Endpoint Manager versions prior to 2020.1.2
Description
The issue allows privilege escalation from a local standard or service account with SeImpersonatePrivilege, such as
NT AUTHORITYNETWORK SERVICE, to NT AUTHORITYSYSTEM due to several services accessing named pipes with default or overly permissive security attributes.Recommendations
For Ivanti Endpoint Manager versions prior to 2020.1.2, update to version 2020.1.2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾