CVE-2019-12376

Name of the Vulnerable Software and Affected Versions Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) version 10.0.1.168 Service Update 5

Description The issue is related to the use of a hard-coded encryption key, which may allow an authenticated user with read privileges to compromise a managed endpoint.

Recommendations For Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) version 10.0.1.168 Service Update 5, consider changing the hard-coded encryption key to a unique, non-hardcoded value to prevent potential compromise. At the moment, there is no information about a newer version that contains a fix for this vulnerability.