CVE-2019-10651
Summary
| CVE | CVE-2019-10651 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-07-11 18:15:00 UTC |
| Updated | 2020-08-24 17:37:00 UTC |
| Description | An issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote code execution. In other words, the issue affects 2017.3, 2018.1, and 2018.3 installations that lack the April 2019 update. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ivanti | Endpoint Manager | 2017.3 | All | All | All |
| Application | Ivanti | Endpoint Manager | 2018.1 | All | All | All |
| Application | Ivanti | Endpoint Manager | 2018.3 | All | All | All |
| Application | Ivanti | Endpoint Manager | 2017.3 | All | All | All |
| Application | Ivanti | Endpoint Manager | 2018.1 | All | All | All |
| Application | Ivanti | Endpoint Manager | 2018.3 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Community | CONFIRM | forums.ivanti.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.