// For flags

CVE-2019-12375

 

Severity Score

6.3
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote information disclosure and arbitrary code execution.

Los directorios abiertos en Ivanti LANDESK Management Suite (LDMS, también conocido como Endpoint Manager) 10.0.1.168 Service Update 5 pueden llevar a la revelación remota de información y la ejecución de código arbitrario.

*Credits: N/A
CVSS Scores
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
Low
Attack Vector
Adjacent
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2019-05-27 CVE Reserved
  • 2019-06-03 CVE Published
  • 2023-07-13 EPSS Updated
  • 2024-08-04 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-552: Files or Directories Accessible to External Parties
CAPEC
References (1)
URL Tag Source
https://www.gnzlabs.io/gnzlabs-blog/landesk-management-server-open-directories Third Party Advisory
URL Date SRC
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ivanti
Search vendor "Ivanti"
 Landesk Management Suite
Search vendor "Ivanti" for product "Landesk Management Suite"
 10.0.1.168
Search vendor "Ivanti" for product "Landesk Management Suite" and version "10.0.1.168"
service_update_5
Affected