Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes; as these services run as user ‘NT AUTHORITY\SYSTEM’, the issue can be used to escalate privileges from a local standard or service account having SeImpersonatePrivilege (eg. user ‘NT AUTHORITY\NETWORK SERVICE’).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ivanti Endpoint Manager 安全漏洞
Vulnerability Description
Ivanti Endpoint Manager（EPM）是美国Ivanti公司的一套端点安全管理器。 Ivanti Endpoint Manager on Windows 2020.1.1 版本及之前版本存在安全漏洞，该漏洞源有几种服务正在使用默认或过分的安全性属性访问Ivanti Endpoint Manager中的命名管道，由于这些服务以用户“NT AUTHORITYSYSTEM”的身份运行，因此该问题可用于升级具有SeImpersonatePrivilege的本地标准或服务帐户的特权。
CVSS Information
N/A
Vulnerability Type
N/A