Arbitrary File Upload Vulnerability in Ivanti LANDESK Management Suite (LDMS) 10.0.1.168 Service Update 5

CVE-2019-12377 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

A vulnerable upl/async_upload.asp web API endpoint in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 allows arbitrary file upload, which may lead to arbitrary remote code execution.

Learn more about our Web App Pen Testing.