CVE-2019-12376 - Use of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to full managed endpoint compromise by an authenticated user with read privileges

Back Back to CVE browser

MEDIUM

Use of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to full managed endpoint compromise by an authenticated user with read privileges

Published Jun 3, 2019

4.5

MEDIUM

CVSS 3.0

EPSS 0.60%

Description

Use of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to full managed endpoint compromise by an authenticated user with read privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4011
Advisory
https://www.gnzlabs.io/gnzlabs-blog/landesk-management-server-hard-coded-encryption-key/
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4011		Advisory
https://www.gnzlabs.io/gnzlabs-blog/landesk-management-server-hard-coded-encryption-key/		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 3, 2019

Updated Aug 4, 2024

Reserved May 27, 2019

Link CVE-2019-12376

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-12376

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 3, 2019

Updated Aug 4, 2024

Link EUVD-2019-4011

GitHub

No data