CVE-2019-12377 | BDVDB-2026-117339 Detail

Description#

A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 allows arbitrary file upload, which may lead to arbitrary remote code execution.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.gnzlabs.io/gnzlabs-blog/landesk-management-server-arbitrary-file-upload/
https://www.gnzlabs.io/gnzlabs-blog/landesk-management-server-multiple-vulnerabilities/

Exploit#

No public exploit known

History#

Version 12019-06-03Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.