CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It affects Ivanti. It involves a SQL injection risk.
CVE
CVE-2019-12374
Severity
HIGH
CVSS
8.1
EPSS
2.63%
Ivanti
Original NVD Description
A SQL Injection vulnerability exists in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 due to improper username sanitization in the Basic Authentication implementation in core/provisioning.secure/ProvisioningSecure.asmx in Provisioning.Secure.dll.
Related CVEs
Other vulnerabilities affecting the same vendor(s)