Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in lockdown mode.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ivanti Endpoint Security 权限许可和访问控制错误漏洞
Vulnerability Description
Ivanti Endpoint Security（前称HEAT Endpoint Management and Security Suite）是美国Ivanti公司的一款端点安全管理软件。该软件提供媒体保护、远程端点控制、安全诊断、仪表板和安全报告等功能。 Ivanti Endpoint Security 8.5 Update 1及之前版本中存在访问控制错误漏洞。攻击者可利用该漏洞绕过应用程序白名单限制。
CVSS Information
N/A
Vulnerability Type
N/A