Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an authenticated attacker to read arbitrary files from a remote system, including the private key used to authenticate to agents for remote access.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ivanti Endpoint Manager 安全漏洞
Vulnerability Description
Ivanti Endpoint Manager是美国Ivanti公司的一套端点安全管理器。Contents是Countly Team团队的一个产品分析解决方案和创新推动者。可帮助团队跟踪移动、网络和桌面应用程序中的产品性能、客户旅程和行为。 Ivanti Endpoint Manager 2022 SU4 之前版本存在安全漏洞，该漏洞源于/landesk/managementsuite/core/core.secure/OsdScript.asmx 的 GetFileContents SOAP 中存在文件
CVSS Information
N/A
Vulnerability Type
N/A