Description
In /ldclient/ldprov.cgi in Ivanti Endpoint Manager through 2020.1.1, an attacker is able to disclose information about the server operating system, local pathnames, and environment variables with no authentication required.
Unscored
CVE-2020-13772
EUVD-2020-5989GHSA-p6cc-crvg-h2f7
In /ldclient/ldprov.cgi in Ivanti Endpoint Manager through 2020.1.1, an attacker is able to disclose information about the server operating…
Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre