landesk management suite vulnerabilities and fixes

Recent CVEs affecting landesk management suite, with upgrade or downgrade steps. 9 tracked.

Also searched as: landeskmanagementsuite.

landesk management suite has 9 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2019-06-03. Highest priority: CVE-2019-12377 (score 68/100).

• CVE-2019-12377 CRITICAL 9.8 DOWNGRADE A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Mana
• CVE-2019-12376 MEDIUM 4.5 DOWNGRADE Use of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168
• CVE-2019-12375 MEDIUM 6.3 DOWNGRADE Open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 m
• CVE-2019-12374 HIGH 8.1 DOWNGRADE A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.16
• CVE-2019-12373 CRITICAL 9.0 DOWNGRADE Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 1
• CVE-2016-3147 CRITICAL 9.8 UPGRADE Buffer overflow in the collector.exe listener of the Landesk Management Suite 10.0.0.271 and earlier allows re
• CVE-2014-5362 HIGH 7.2 UPGRADE The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file
• CVE-2014-5361 MEDIUM 6.8 UPGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow r
• CVE-2014-5360 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 all

FAQ

How do I fix landesk management suite vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is landesk management suite being exploited right now?

None of the tracked landesk management suite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which landesk management suite CVE should I patch first?

CVE-2019-12377 currently ranks highest (68/100): A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Mana.

RSS feed for landesk management suite · ← Back to latest CVEs