CVE-2020-13771 | BDVDB-2026-144690 Detail

Description#

Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain conditions) one to gain code execution (and elevation of privileges to the level of privilege held by the vulnerable component such as NT AUTHORITY\SYSTEM) via DLL hijacking. This affects ldiscn32.exe, IpmiRedirectionService.exe, LDAPWhoAmI.exe, and ldprofile.exe.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://labs.jumpsec.com/advisory-cve-2020-13771-ivanti-uem-dll-hijacking/

Exploit#

No public exploit known

History#

Version 12020-11-12Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.