LDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request.

Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre